http://www.securityfocus.com/bid/20897
http://xforce.iss.net/xforce/xfdb/29992
Watch
GitHub Core
Show your support for Zikula! Sign up at Github account and watch the Core project!
GitHub Modules
Forum Activity
- internetking created topic »password problem« 25. May
- mesteele101 responded to »ERR (3): E_USER_ERROR: Smarty error: [in pagesvar:pagesitem2en line XXX]…« 25. May
- mazdev responded to »Pages 2.5.0 and updating - Page not found« 25. May
- ehdwma created topic »Hide "Register new account" and change template to 3 col« 25. May
- mesteele101 responded to »Zikula 1.3.3 - Selecting a category in Pages not working« 25. May
- mdee created topic »How to implement returnpage ?« 25. May
- nestormateo responded to »Fillters in Clip« 24. May
Zikula Blog
- Anatomy of Open Source Projects on Mar 07
- Continuous Review on Mar 01
- Not Invented Here on Feb 24
- How to Contribute Your Code at Github on Jan 13
- 10 Steps to Coding-Nirvana: Tips for Successful Module Writing on Nov 12
- Submitting Bug Report Tickets That Get Results on Aug 17
- Cozi Tricks #1: Syntax Highlighting on Aug 07
Login
PNUser.PHP Local File Include Vulnerability (Nov-2006)
-
**unknown user**
- Rank: Registered User
- Registered: Mar 16, 2002
- Last visit: Oct 21, 2009
- Posts: 42
Posted: Nov 08, 2006 - 10:09 PM
-
- Rank: Software Foundation
- Registered: Dec 31, 1969
- Last visit: Oct 21, 2009
- Posts: 3814
Posted: Nov 08, 2006 - 10:46 PM
thx for reporting (although security related stuff should be mailed via our contact mailer).
a fix for the base problem has already been commited to our SVN:
error.php
additionally a couple of related fixes are currently in qa:
/includes/pnAPI.php
/includes/pnLang.php
/includes/pnTheme.php
a fixpackage and an updated fullpackage will be released within the next days.
--
regards from germany
..::[Zikula Application Framework]::.. ..::[SEO-Blog]::.. ..::[CMS Sicherheit]::..
-
**unknown user**
- Rank: Softmore
- Registered: Mar 16, 2002
- Last visit: Oct 21, 2009
- Posts: 222
Posted: Nov 09, 2006 - 06:07 AM
So using that error.php will help in the meantime?
edited by: Thug21, Nov 09, 2006 - 06:35 PM
-
- Rank: Team Member
- Registered: Dec 07, 2003
- Last visit: May 09, 2010
- Posts: 2703
Posted: Nov 09, 2006 - 07:18 AM
Yup.
--
David Pahl
Zikula Support Team
-
**unknown user**
- Rank: Softmore
- Registered: Mar 16, 2002
- Last visit: Oct 21, 2009
- Posts: 222
Posted: Nov 09, 2006 - 07:37 AM
Thanks for the reply!
- Moderated by:
- Support
Users on-line
- 0 users
This list is based on users active over the last 60 minutes.
