Downloads Pro beta 2 repackaged due to security exploit ⇒ News ⇒ CPG Dragonfly™ CMS

Downloads Pro beta 2 repackaged due to security exploit

Posted by Trevor on 2006-01-02 13:48:56 (5942 views)

Downloads Pro beta 2 has been repackaged due to an exploit identified within the screenshot upload system. For obvious reasons, exact details of the exploit will not be disclosed. All users of Downloads Pro, regardless of version, are strongly urged to upgrade to the latest version (beta 2) which has just been repackaged. This release addresses the exploit and fixes the previously identified bug regarding searching. If you recently upgraded to beta 2, you need not reupload every file to your website. The files changed in this release are:

modules/Downloads/functions/screenshots.inc - download file
modules/Downloads/functions/display.inc - download file

Download entire package

Comments

No Comments

Reply Anonymous ( Login | Register )

Related Links

More about Security

Most read story about Security:
security hole recently found in AWStats

Article Rating

Average Score: 4.33
Votes: 3
★★★★
Please take a second and vote for this article:

User Info

Welcome Anonymous

Community

Support for DragonflyCMS in a other languages:

• Deutsch
• Español

Mercurial Commits

· Revert: a TPL change created "Unable to find variable" when only checking if exists
· Added: somesort of Grimpow's feature request in https://dragonflycms.org/Forums/viewtopic/t=25701.html
· Merge some Poodle updates
· Get rid of Fix_Quotes
· I think almost everything is now converted to L10N system
· Added: L10N->sprintf($var, $arg...) Added: detect isEmptyElement in TPL XML chunk parser Prepare: more language strings Strip: type="text/javascript" as it is not needed in HTML5
· Added: JavaScript syntaxhighlighter "cli" mode Bugfix: add back missing _BREADCRUMB language string Change: _BC_DELIM define to config setting
· Prepare: language strings Removed: Yahoo Messenger
· Prepare: all 'defined' language strings references to new L10N system (except coppermine)
· Added: MailboX verification due to Microsoft keep banning IP's Now visitors with a hotmail/outlook account can't register as the e-mails will never arrive anyway

read more...

All content of this website is copyrighted by the Creative Commons NC-SA
The logos and trademarks used on this site are the property of their respective owners
We are not responsible for comments posted by our users, as they are the property of the poster.
Our server runs on 2 × 2.4 Ghz @ 60% with 2048 MB RAM with no accelerators

Interactive software released under GNU GPL, Code Credits, Privacy Policy