CMSMS security documents?

[Recon]

Hi,

I can't found or I can't search with right keywords any security documents witch are refer to CMSMS. My costumer want his company websites to be build with WordPress, but I we have agree that sites will be build with CMSMS. For this reason customer want security documents. I don't even know is there these kind document? Any links to tests? Or something?

BR

-R

[Dr.CSS]

You may notice we don't have a board dedicated to security problems, where as some of the other CMSs do because it is such an ongoing concern for them, we have someone who tests every version of CMSMS for any vulnerabilities and we fix them as soon as they are found...

[Recon]

I have noticed and have fully trust to development team , but how convince my customer, who is not familiar with the CMSMS?

Any third party company's test where have compered different cms? Or some sentences from development team why cmsms don't have security issues?

-R

[Jos]

You can check the announcements for new releases, count the times where is stated that some vulnerability has been solved. You won't find many on CMSms

[Jo Morg]

5 years+ using it in sites. Never had an issue with CMSMS. The only time a site was compromised was a server problem not a CMSMS problem.

[manuel]

Dear Recon,

I think this should do it

http://secunia.com/community/advisories ... ade+Simple
http://secunia.com/community/advisories ... arch=cmsms
http://secunia.com/community/advisories ... =WordPress

Personally, i only experienced one single issue.
A content editor was working with an infected browser on her Mac.
Every time she edited a page, the infected browser inserted a javascript in the wysiwyg. (it replaced certain keywords with advertising links)
This was clearly not a cmsms issue and was fixed easily by reinstalling her browser.

Just keep everything more or less up to date and you should be fine (and make a backup once in a while )

Greetings,
Manuel

[Recon]

Thx Manuel, I will check those.


Jo Morg, like I said, this is FOR CUSTOMER, not for me. I can't say to my customer: "yes, this is what we need to use, because Jo Morg says on the forum, that he has use this for 5 years"

-R

[Jo Morg]

Jo Morg, like I said, this is FOR CUSTOMER, not for me. I can't say to my customer: "yes, this is what we need to use, because Jo Morg says on the forum, that he has use this for 5 years"

You can't?
Heh!

[Dr.CSS]

You can always tell them I said it was safe to use and they are ID10Ts if they use anything else...