URGENT: AdaptCMS 1.3 Security Fix Released
Posted By: adminOn: October 03, 2008 - 8:20 pm
For the first time with AdaptCMS, Insane Visions has issued an urgent security fix. This recent security hole was discovered by the group at Milw0rm. Upon hearing about this security hole we immediately fixed the problem in a matter of minutes and are now issuing this fix.
The Security Hole was related to the new "Check User" feature in AdaptCMS Lite 1.3 and AdaptCMS Pro 1.3. When signing up you would enter the username desired, once moving to the password field a box would appear saying whether the username was taken or not. The issue was the PHP that checks to see if the username is taken did not use any safe guards incase of SQL injection. The worst consequence is the stealing of the MD5 hash of a users password but NO passwords themselves were vulnerable to this problem.
This fix is simply one file which goes into the "includes/" folder. We recommend that all AdaptCMS Lite users upload this fixed file immediately. Thank you.
Sorry but you cannot post a comment, you do not have the necessary permissions to.
Comments
| Guest, April 16, 2011 - 8:24 am |
| AKAIK you've got the awnser in one! |
Rating:  , Rate Comment: Sorry, you cannot rate this item again |
| Guest, April 17, 2011 - 12:32 pm |
| m7kgKJ , [url=http://uthvkouvjouo.com/]uthvkouvjouo[/url], [link=http://krbjqxrtlqnl.com/]krbjqxrtlqnl[/link], http://ejhksfbgzcth.com/ |
| Rating: , Rate Comment: Sorry, you cannot rate this item again |
| Guest, April 27, 2011 - 10:53 am |
| [url=http://www.easyinsur.net/]car insurance quotes[/url] 3603 [url=http://www.insursearchonline.com/]auto insurance[/url] 089255 |
| Rating: , Rate Comment: Sorry, you cannot rate this item again |
| Guest, April 30, 2011 - 12:15 am |
| [url=http://www.easyinsurs.com/]car insurance[/url] =P [url=http://www.insurersguidesite.com/]buy car insurance online[/url] 8OOO |
| Rating: , Rate Comment: Sorry, you cannot rate this item again |
| Guest, May 11, 2011 - 7:47 am |
| [url=http://www.generalmeds.net/]prednisone[/url] :-((( [url=http://www.fastrxstore.net/]ultram[/url] yxi [url=http://www.123-drugstore.com/]aciphex 20 mg prilosec[/url] 40022 |
| Rating: , Rate Comment: Sorry, you cannot rate this item again |
| Guest, May 12, 2011 - 1:41 am |
| [url=http://gameshowcongress.com/]slots casino[/url] 88260 [url=http://www.oxnardexplorers.com/]air tickets[/url] cdvcg [url=http://www.tratartan.com/cheap-flights.html]air flight[/url] 290 |
| Rating: , Rate Comment: Sorry, you cannot rate this item again |
| Guest, May 15, 2011 - 12:07 pm |
| [url=http://www.carinsuronline.com/]insurance auto[/url] 31256 [url=http://www.soulpaintersblog.com/cheapcarinsurance.html]cheap car insurance[/url] 4334 [url=http://www.insurersontheweb.net/]insurance auto[/url] mfjl |
| Rating: , Rate Comment: Sorry, you cannot rate this item again |
| Guest, May 16, 2011 - 3:08 am |
| [url=http://www.insur-policies.com/]life insurance[/url] >:( [url=http://www.bestinsurers.net/]auto insurance quotes[/url] 826470 [url=http://www.homeinsuronline.com/]home insurance[/url] 812 |
| Rating: , Rate Comment: Sorry, you cannot rate this item again |
| Guest, February 14, 2012 - 9:38 pm |
| mozrby [url=http://cheapstrongcialis.com/]generic cialis[/url] >:-OOO [url=http://cheapstrongviagra.com/]viagra[/url] 8419 [url=http://viagrarxviagra.com/]sildenafil price[/url] YfkHx [url=http://cialisrxcialis.com/]buying cialis online[/url] 4067 |
| Rating: , Rate Comment: Sorry, you cannot rate this item again |
Page processed in 0.067 seconds.
