1
A-dog
Re: Security Focus shows Xoops flaws - is 1.3.10 safe?
  • 2003/12/12 2:18

  • A-dog

  • Just popping in

  • Posts: 19

  • Since: 2002/1/25


I realize there is a fix for the latest version.. but I'm not upgrading to RC2.0 because I'm using a very modified custom theme with 1.3.10

http://www.secunia.com/advisories/8672/

this site warns of an old bug, but my question was, is 1.3.10 still affected, and if so, or was it fixed in the 4/26 update? If not, can't devs provide an upgrade for this 1.3.10 since many people still don't use RC2.0 and beyond due to the new theme system..?

I've got a hacker telling me that he is doing something to cause a Buffer Overflow and its letting him into my server.
I think it has something to do with a form being insecure in some way. Help appreciated.



2
A-dog
Security Focus shows Xoops flaws - is 1.3.10 safe?
  • 2003/12/10 23:18

  • A-dog

  • Just popping in

  • Posts: 19

  • Since: 2002/1/25


I noticed at the websitehttp://www.securityfocus.com
if you do a search for XOOPS it returns many of the fixes
we've seen lately.. well I've not been around here much lately but I was wondering if any of the devs can tell me if 1.3.10 is safe from cross-scripting attacks as found in recent times? I know that version contained many fixes of the sort but what about recent discoveries? I've had my front page replaced recently by hackers but they're cooperating with help..as any good hacker would. Thank God.

LMK!
A-Dog



3
A-dog
Re: Xoops doesn't like ZoneAlarm Pro
  • 2002/9/11 17:55

  • A-dog

  • Just popping in

  • Posts: 19

  • Since: 2002/1/25


Any word from the developers whether or not a fix will come from this situation?



4
A-dog
Re: Xoops doesn't like ZoneAlarm Pro
  • 2002/9/6 16:52

  • A-dog

  • Just popping in

  • Posts: 19

  • Since: 2002/1/25


I have Zone Alarm Pro and I don't have any problems getting into this site or my own or any others. However I still have the Register.php problem..no server found error...then when I reload a few times, it finally loads. Its gotta be an IE6 bug. But I seem to be one of very few that get this error. Anyways, I have Zone Alarm set to High Security for Internet Zone and Medium Security for my Trusted Zone. These settings should work for you in addition to any 3rd party cookie settings you adjust in windows. If windows cookie security settings need to be adjusted for any site to work, then XOOPS needs a fix for this.



5
A-dog
Re: Hacked the REF Hack :o)
  • 2002/2/27 11:20

  • A-dog

  • Just popping in

  • Posts: 19

  • Since: 2002/1/25


really sweet. man thats nice. Just installed it. Thanks for the cleanup.
I really enjoyed playing with this one.. headers look great..the SE's will really do their jobs with these keywords...




TopTop



Login

Who's Online

236 user(s) are online (143 user(s) are browsing Support Forums)


Members: 0


Guests: 236


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Apr 30
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits