| Re: File manager KO |
Titre du sujet : Re: File manager KO
par Ghia sur 02/12/2008 23:46:55
Citation :J'ai vu sur le net cela :
Citation :
The editor_registry.php in XOOPS is affected by a directory traversal vulnerability. By sending a xoopsConfig[language] parameter containing dot-dot-slash strings and a trailing null byte (%00), a remote attacker can read any file on the system. XOOPS version 2.2.3 is affected by this vulnerability.
Resolution:
Upgrade to version higher than 2.2.3 when it becomes available.
Est-ce nécessaire ?
Vous etes trompee au nummero de version.
Il s'agit du 2.2.3 de 2005 et maitenant on a 2.3.2.
|
|
