Login
Username

Password



Not a member yet?
Click here to register.

Forgotten your password?
Request a new one here.
Navigation
Latest Addons
AD Gallery 44
SyntaxHighlighte... 48
Newsletters v4.03 106
Facebook Like Box 122
Newsletters v4.02 56
Metro 153
Facebook Connect 166
Shoutbox Panel 125
Redactor for PHP... 104
MI Floating Side... 106
Facebook Login/R... 149
Avatar Studio v2.03 177
Relationship Sta... 96
Sexual Orientati... 113
Fisherman 140
Popular Addons
iTheme2 5796
Arise 5783
User Control v1.23 4616
Event Calendar 4045
Photowidget panel 3884
Radio-Theme red2... 3350
Highslide Gallery 3311
CSS/JavaScript D... 3223
Facebook Connect... 2980
Dynamic Menu 2889
Slideshow Lightb... 2719
L-AMANT 2656
Enigma 2629
2Dark 2603
Black 2571
View Thread
Official Home of PHP-Fusion » PHP-Fusion 7 Support » Security Issues & Announcements
Who is here? 1 guest(s)
 Print Thread
Security Issue in Mp3 Player Panel 2.1
Layzee
Top  #1 Print Post
Posted on 05-07-2012 06:37
As reported on official german/austria NSS and unofficial german supportsite,
THIS Infusion has a serious security vulnerability.

The unsecure File is "[...] part of Uploadify v1.6.2" which allows to upload ANY kind of File in this infusion.

Please inform the Coder of this addon and/or delete it from your Downloadcenter.

Threads:
German/Austria NSS: http://www.php-fu...ead_id=278

Inofficial German supportsite: http://phpfusion-...pid=211634

Best regards
 
http://gfdf.de
HobbyMan
Top  #2 Print Post
Posted on 18-07-2012 16:19
Addon suspended pending investigation by author.

(author pm'd)

--
Just some Guy
 
http://www.hobbysites.net/
Jump to Forum:
Similar Threads
Thread Forum Replies Last Post
Link panel to another subdomain Content Administration 3 19-05-2013 08:50
Stop Forum Spam Panel Official releases [Panels] 14 12-05-2013 19:51
edit login side panel. Content Administration 3 10-05-2013 18:45
Theme Control Panel Content Administration 2 08-05-2013 13:19
Add buttons to login panel Content Administration 3 06-05-2013 19:24
Official Home of PHP-Fusion uses cookies. Some may already have been set. Read more about our Cookies here.
Please click the button I Consent Cookies to hide this bar and accept our cookies. If you continue to use the site with no action taken, we'll assume that you consent our cookies anyway.
Cookiebar Panel byVenue
 Arise Theme by Domi 2011 105,716,277 unique visits 

 CloudVPS

Powered by PHP-Fusion copyright © 2002 - 2013 by Nick Jones.
Released as free software without warranties under GNU Affero GPL v3.