31.01.2006, 14:14
|
| Linuxfanatiker | | Registriert seit: 10.2005 Ort: Innnsbruck
Beiträge: 166
| |
| MyBB 1.03 Released - Security Update
Zitat:
As some of you saw, when these forums were attacked, there has been the discovery of another serious security exploit in MyBB.
Soon after the boards were exploited, backups of the forum were restored and the discovery process began. Due to access logs being completely useless (Corrupt), I took to the code and found the potential vulnerability the attacker exploited.
Available immediately, we're announcing a security update for MyBB dubbed MyBB 1.03. This exploit affects ALL COPIES OF MYBB including previous versions. We recommend everybody update their board as soon as possible.
The update fixes the found SQL injection vulnerability (Critical) as well as several other medium priority vulnerabilities recently discovered. (Due to be released tomorrow anyway)
Affected files:- global.php
- search.php
- usercp.php
- inc/functions.php (Version number change)
Updating Your Board
Please check your Admin CP to determine which MyBB version you are currently using.
If you are running MyBB 1.02- Download the files in the attachment below and upload them to your forum.
You do NOT need to run the upgrade scripts.
Any previous versions- Download the latest copy of MyBB from the MyBB website.
- Proceed with an upgrade as you usually would.
If you are running MyBB 1.01, or MyBB 1.0 then you do not need to run any upgrade scripts. |
Quelle:
http://community.mybboard.net/showthread.php?tid=6418
|
Ähnliche Themen 
