Remote Vulnerabilities

[Jeff]

Hey i have been with this project since the beginning and i couldn't be happier that its back...
Im looking forward to helping improve the project and watch it grow once again....

But the one thing i remember from before it was closed was this injection below is a link talking about it....

Hope this helps.....

http://www.milw0rm.com/exploits/4139

and my site will be back up soon..... i just have to find my year old backups lol

[naxtra]

hmm...thx...

is there any solution to it 

[Jeff]

ya there is... there always is... im sure this will be patched in .30 or 1.0(what ever its oging to be lol)

im lookinf into a fix for .21 tho

[Chris (krissy)]

ya there is... there always is... im sure this will be patched in .30 or 1.0(what ever its oging to be lol)

im lookinf into a fix for .21 tho

Here was a fix but i've lost it 

I'll get it from ben though..

[naxtra]

Thx - hope Ben has it 

[Chris (krissy)]

Thx - hope Ben has it 

I've gave ben an email and will post this fix as soon as i have it.

[Jeff]

Sweet thank you

[Dudditz]

Thats weird - I have been running 0.21 since June of last year and those exploits do not work when I tried.
Site running on a subdomain with php 5.2.5 globals_off so was this possibly relying on older versions of php or globals being on?

[Chris (krissy)]

There was a few bugs allowing such things but they have been fixed and released in our latest update .

[Jeff]

There was a few bugs allowing such things but they have been fixed and released in our latest update .

by the way great job on the release and fixing the bugs..... kudos to Simpsonking

[naxtra]

Thanks a lot PhPD Team!!!