[IPS News] IP.Board 2.3.6 and 3.0.5 Security Update

[NewsBot]

It has come to our attention that there is a possible XSS exploit present in both IP.Board 2.3.6 and 3.0.x. This vulnerability allows the attacker to insert CSS or Javascript into certain BBCodes that is executed when a user displays the page.

Resolution

Please download the relevant zip for your IP.Board. Expand the zip file and upload the file over the copy on your server. No other action is required.

IP.Board 3.0.5

305xss_march10.zip (13.29K)

IP.Board 2.3.6

236xss_march10.zip (15.61K)

The main download zips have been updated. If you have downloaded either 2.3.6 or 3.0.5 since the time of this announcement, then you do not need to patch your installation.

Zobacz cały news

[Amfidiusz]

Ma to też zastosowanie na 3.0.4?

[Pavulon]

Pewnie tak, ale najlepiej porównaj te pliki.

[DawPi]

Ważna łatka!

[DawPi]

Wydano najnowszą poprawkę do tej łatki - tylko do wersji 3.0.5! Zalecam natychmiastową aktualizację lub wgranie tejże łatki.