Articles within Security
Security
As always, security is on top of priority list of XOOPS!
Current users of XOOPS 2.5.6 are encouraged to download and apply a Security Patch.
Download: SourceForge File Repository
This security patch fixes some potential XSS issues discovered by Mehdi Dadkhah and fixed by Richard Griffith.
While...
Current users of XOOPS 2.5.6 are encouraged to download and apply a Security Patch.
Download: SourceForge File Repository
This security patch fixes some potential XSS issues discovered by Mehdi Dadkhah and fixed by Richard Griffith.
While...
Security
Current users of XOOPS 2.5.5 are encouraged to download and apply a Security Patch.
This patch is included in the upcoming XOOPS 2.5.6, which should be released in the next couple of weeks, after the testing of the Beta version is done.
Download: SourceForge File Repository
This patch is included in the upcoming XOOPS 2.5.6, which should be released in the next couple of weeks, after the testing of the Beta version is done.
Download: SourceForge File Repository
Security
We've been made aware of a vulnerability of the Protector, if placed in the DocumentRoot
This is for all versions of XOOPS, if the XOOPS_TRUST_PATH (or xoops_lib) directory that contains the Protector, is placed in the DocumentRoot
As we've always communicated to you (e.g. in this article A Guide...
This is for all versions of XOOPS, if the XOOPS_TRUST_PATH (or xoops_lib) directory that contains the Protector, is placed in the DocumentRoot
As we've always communicated to you (e.g. in this article A Guide...
Security
The security is always on top of the list of XOOPS Developers. Therefore the XOOPS Development Team is pleased to announce the release of XOOPS 2.3.2b, an improved XOOPS 2.3.x release.
This release is solely for a couple of critical fixes, including an XSS vulnerability reported by Digital...
This release is solely for a couple of critical fixes, including an XSS vulnerability reported by Digital...
Security is always the highest priority for XOOPS, and therefore we are releasing Security Updates as soon as we find a viable solution.
This is a temporary quick fix for Protector module, addressing potential local file inclusion vulnerability reported by DSRG. We hope that GIJOE, the author of...
This is a temporary quick fix for Protector module, addressing potential local file inclusion vulnerability reported by DSRG. We hope that GIJOE, the author of...
Security
The XOOPS Development Team is pleased to announce the release of XOOPS 2.3.2a
This release is solely for a couple of critical security fixes, including an XSS vulnerability reported by Digital Research Group, potential local file inclusion vulnerability reported by DSG, Autologin bug reported by...
This release is solely for a couple of critical security fixes, including an XSS vulnerability reported by Digital Research Group, potential local file inclusion vulnerability reported by DSG, Autologin bug reported by...
The reason for writing this guide is NOT because XOOPS CMS-system isn’t secure enough.
It’s written to give new XOOPS'ers a chance to make, with a few changes, a secure installation even more secure. We believe, that existing users also can use the guide, for securing an already installed XOOP...
Security
We found XSS valnabirity at our sources.
Backpack v0.91 or before
Bmsurvey v0.84 or before
Newbb_fileup v1.83 or before
News_embed v1.44 ( news_fileup ) or before
Popnupblog v3.19 or before
If you are using those scripts we recommend update immediately.
Jump to vendor site
Backpack v0.91 or before
Bmsurvey v0.84 or before
Newbb_fileup v1.83 or before
News_embed v1.44 ( news_fileup ) or before
Popnupblog v3.19 or before
If you are using those scripts we recommend update immediately.
Jump to vendor site
As always, XOOPS developers are committed to ensuring the highest security of XOOPS code. The message below comes from Catzwolf:
Quote:
Quote:
If you are still using WF-Sections v1+ and v2+ then I suggest that you read this please.
It has come to my attention that there is a few very bad security exploits...
XoopsGallery is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.
XoopsGallery 1.3.3.9 has been confirmed vulnerable.
we advise you to upgrade to XoopsGallery 2.1+ or inactivate the module immediately until this issue is solved.
Thank...
XoopsGallery 1.3.3.9 has been confirmed vulnerable.
we advise you to upgrade to XoopsGallery 2.1+ or inactivate the module immediately until this issue is solved.
Thank...
Security
A vulnerability is reported in PHPMailer, which can be exploited by malicious people to compromise a vulnerable system if Sendmail method is enabled.
Although the issue is not critical in XOOPS environment, we would suggest to switch to other methods than Sendmail, or to download quick fixes:
fix...
Although the issue is not critical in XOOPS environment, we would suggest to switch to other methods than Sendmail, or to download quick fixes:
fix...
Security
Vulnerability was reported in some version of the SPAW editor, which is used by some of XOOPS third-party modules.
Module "tinycontent" is one of the modules using SPAW. Although we are not sure which version(s) is vulnerable, we suggest disable SPAW in tinycontent and remove the...
Module "tinycontent" is one of the modules using SPAW. Although we are not sure which version(s) is vulnerable, we suggest disable SPAW in tinycontent and remove the...
Following a hack on one of our websites, the site hosters have claimed that the hack occured because of insecurity in the Xoops systems.
Login
Search
Recent Comments
Who's Online
Donat-O-Meter
| Stats | |
| Goal: | $100.00 |
| Due Date: | Jan 31 |
| Gross Amount: | $0.00 |
| Net Balance: | $0.00 |
| Left to go: | $100.00 |
 |
|