Page 1 of 1

CMS Made Simple 'cms_language' Cookie Parameter Directory Traversal Vulnerabilit

Posted: Sun Nov 30, 2008 5:28 am
by johnbmcdonald
Just ran across this, thought you'd like to know:

http://www.securityfocus.com/bid/32535

John

Re: CMS Made Simple 'cms_language' Cookie Parameter Directory Traversal Vulnerabilit

Posted: Sun Nov 30, 2008 12:21 pm
by RonnyK
Thanks John,

will pass it on for examination....

Ronny

Re: CMS Made Simple 'cms_language' Cookie Parameter Directory Traversal Vulnerabilit

Posted: Sun Nov 30, 2008 12:48 pm
by Dee
Has already been picked up by calguy.

Replace admin/lang.php with the latest revision to fix.

Regards,
D

Re: CMS Made Simple 'cms_language' Cookie Parameter Directory Traversal Vulnerabilit

Posted: Mon Dec 01, 2008 4:16 pm
by johnbmcdonald
Thanks!  :)

Re: CMS Made Simple 'cms_language' Cookie Parameter Directory Traversal Vulnerabilit

Posted: Tue Dec 02, 2008 10:25 pm
by michi1979
Hello,
is this fix also included in 1.5 ?

Greetings,
Michael

Re: CMS Made Simple 'cms_language' Cookie Parameter Directory Traversal Vulnerabilit

Posted: Tue Dec 02, 2008 11:26 pm
by alby
michi1979 wrote: is this fix also included in 1.5 ?
yes

Alby