CMS Made Simple 'cms_language' Cookie Parameter Directory Traversal Vulnerabilit

johnbmcdonald · Post by **johnbmcdonald** » Sun Nov 30, 2008 5:28 am

Just ran across this, thought you'd like to know:

http://www.securityfocus.com/bid/32535

John

RonnyK · Post by **RonnyK** » Sun Nov 30, 2008 12:21 pm

Thanks John,

will pass it on for examination....

Ronny

Dee · Post by **Dee** » Sun Nov 30, 2008 12:48 pm

Has already been picked up by calguy.

Replace admin/lang.php with the latest revision to fix.

Regards,
D

johnbmcdonald · Post by **johnbmcdonald** » Mon Dec 01, 2008 4:16 pm

Thanks!

michi1979 · Post by **michi1979** » Tue Dec 02, 2008 10:25 pm

Hello,
is this fix also included in 1.5 ?

Greetings,
Michael

alby · Post by **alby** » Tue Dec 02, 2008 11:26 pm

michi1979 wrote: is this fix also included in 1.5 ?

yes

Alby

CMS Made Simple Forums