Posted 20 февраля, 201212 yr comment_434 It has come to our attention that a XSS (Cross Site Scripting) attack is possible within the Admin CP. The javascript is only executed when viewing the detailed pop-up of a specific failed admin log in. This issue exists in all IP.Board 3 versions. We recommend that everyone using these versions apply this simple one file patch. Simply download the zip for your IP.Board version, expand the zip on your computer and upload the file to the relevant folder on your server. The directory structure is maintained in the zip so you will have no issues finding the file. If you need assistance, please contact technical support. IP.Board 3.2.x feb_3_2_x.zip 2.72K 48 downloads IP.Board 3.1.x feb-3_1_x.zip 2.76K 13 downloads IP.Board 3.0.x feb-3_0_x.zip 2.76K 6 downloads If you are running a version of IP.Board older than those listed we highly recommend you upgrade to the latest, supported version as it will include this and other fixes. Читать дальше
20 февраля, 201212 yr comment_438 Не могу понять, это надо загружать? патч нужный? Да, скачать и установить для своей версии форума!
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.