Subject:*
<
Name/Email:*
<
Message Icon:*
<
Select*
<
Message:*
<



Click the Preview to see the content in action.
Options:*
<
Confirmation Code*
<
4 + 6 = ?  
Input the result from the expression
Maximum attempts you can try: 10
*
<
     

Re: extcal Module - How do I get events in progress in the list of upcoming events?
by zoullou on 2008/3/25 12:31:45

Hi all,

All XSS vulnérability will be fixed on eXtCal 2.1.7 that will be release soon

Yours
Re: extcal Module - How do I get events in progress in the list of upcoming events?
by McDonald on 2008/3/14 10:06:36

Yes, 2.1.6 is a dev. version.

But, this morning I performed the same test on eXtCal 2.1.4 and eXtCal 2.1.5, and the same vulnerabilities were found in these versions.

I have not posted this in Zoullou's forum (yet), only submitted it to the bug tracker on SourceForge.
Re: extcal Module - How do I get events in progress in the list of upcoming events?
by Anonymous on 2008/3/14 8:29:13

Quote:
McDonald wrote:

I've done the same test for eXtCal 2.0.4 and no vulnerabilities were found. This version should be safe to use.


This is good news

Quote:
McDonald wrote:

Wondering why so many vulnerabilities exist in dev. version 2.1.6.


I suspect "because it's a dev version" is the answer. Zoullou's having to rewrite a lot code to ad new features such as recurring events, etc and it might be that he's not got it tied down yet.

Have you posted on his Forums? He welcomes feedback and helpful advice.

Cheers
Re: extcal Module - How do I get events in progress in the list of upcoming events?
by McDonald on 2008/3/14 8:08:53

I've done the same test for eXtCal 2.0.4 and no vulnerabilities were found. This version should be safe to use.

Wondering why so many vulnerabilities exist in dev. version 2.1.6.
Re: extcal Module - How do I get events in progress in the list of upcoming events?
by tomodea on 2008/3/14 4:39:00

Quote:

McDonald wrote:
Be carefull with eXtCal.

In dev. version 2.1.6 multiple XSS vulnerabilities have been found. See bug-report.

I asume that previous versions have these probs too.

Make sure you have Protector installed anyway!!


Thanks for the warning. I have XOOPS Protector turned on.

Who's Online

203 user(s) are online (138 user(s) are browsing Support Forums)


Members: 0


Guests: 203


more...

Donat-O-Meter

Stats
Goal: $15.00
Due Date: Jul 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $15.00
Make donations with PayPal!

Latest GitHub Commits