Login
Username

Password



Not a member yet?
Click here to register.

Forgotten your password?
Request a new one here.
Navigation
Latest Addons
SyntaxHighlighte... 41
Newsletters v4.03 101
Facebook Like Box 113
Newsletters v4.02 55
Metro 142
Facebook Connect 159
Shoutbox Panel 120
Redactor for PHP... 102
MI Floating Side... 105
Facebook Login/R... 146
Avatar Studio v2.03 174
Relationship Sta... 92
Sexual Orientati... 110
Fisherman 132
Secure Messaging... 176
Popular Addons
iTheme2 5787
Arise 5776
User Control v1.23 4608
Event Calendar 4035
Photowidget panel 3877
Radio-Theme red2... 3342
Highslide Gallery 3305
CSS/JavaScript D... 3217
Facebook Connect... 2970
Dynamic Menu 2885
Slideshow Lightb... 2711
L-AMANT 2654
Enigma 2626
2Dark 2601
Black 2564
View Thread
Official Home of PHP-Fusion » PHP-Fusion 7 Support » Security Issues & Announcements
Who is here? 1 guest(s)
 Print Thread
Security Issue in Mp3 Player Panel 2.1
Layzee
Top  #1 Print Post
Posted on 05-07-2012 06:37
As reported on official german/austria NSS and unofficial german supportsite,
THIS Infusion has a serious security vulnerability.

The unsecure File is "[...] part of Uploadify v1.6.2" which allows to upload ANY kind of File in this infusion.

Please inform the Coder of this addon and/or delete it from your Downloadcenter.

Threads:
German/Austria NSS: http://www.php-fu...ead_id=278

Inofficial German supportsite: http://phpfusion-...pid=211634

Best regards
 
http://gfdf.de
HobbyMan
Top  #2 Print Post
Posted on 18-07-2012 16:19
Addon suspended pending investigation by author.

(author pm'd)

--
Just some Guy
 
http://www.hobbysites.net/
Jump to Forum:
Similar Threads
Thread Forum Replies Last Post
Stop Forum Spam Panel Official releases [Panels] 14 12-05-2013 19:51
edit login side panel. Content Administration 3 10-05-2013 18:45
Theme Control Panel Content Administration 2 08-05-2013 13:19
Add buttons to login panel Content Administration 3 06-05-2013 19:24
Search Panel Ideas for Modifications and Requests 32 02-05-2013 17:52
Official Home of PHP-Fusion uses cookies. Some may already have been set. Read more about our Cookies here.
Please click the button I Consent Cookies to hide this bar and accept our cookies. If you continue to use the site with no action taken, we'll assume that you consent our cookies anyway.
Cookiebar Panel byVenue
 Arise Theme by Domi 2011 105,652,224 unique visits 

 CloudVPS

Powered by PHP-Fusion copyright © 2002 - 2013 by Nick Jones.
Released as free software without warranties under GNU Affero GPL v3.