Zikula Community

• **unknown user**
  
  

  • Rank: Registered User
  • Registered: Mar 16, 2002
  • Last visit: Oct 21, 2009
  • Posts: 19

  Posted: May 22, 2007 - 03:19 AM

  i happened to saw this vulnerability.
  
  http://www.securityfocus.com/bid/23777/info
  
  getting a fix or response from the author will require some time, so i am thinking if there is anyone who know how to fix this?

  • 
  •  
• rgasch
  
  

  • Rank: Team Member
  • Registered: Jan 05, 2003
  • Last visit: May 28, 2010
  • Posts: 775

  Posted: May 24, 2007 - 09:00 AM

  Hmm, I've just taken a look at the securityfocus announcement and I believe that it refers to an old version of v4bJournal. The reasons for me believing this are as follows:
  
  1) The security announcement refers to v4bJournal version 0.99. The current version is 0.99b (available from http://openstar.postnuke.com/index.php?name=CmodsDownload&file=index&req=viewsdownload&sid=35&orderby=dateD).
  2) The security announcement refers to the function journal_comment. This function no longer exists in the newest version as comments are now handled by EZComments.
  
  Given the above, I believe the security announcement targets an old version of v4bJournal. If you're using the new/current version, you should be safe. If you have any information to the contrary, please let me know and I'll fix it ASAP.
  
  Greetings
  R

  • 
  •  
• **unknown user**
  
  

  • Rank: Registered User
  • Registered: Mar 16, 2002
  • Last visit: Oct 21, 2009
  • Posts: 19

  Posted: May 26, 2007 - 05:36 PM

  oh.. thanks! :)

  • 
  •  
•  
•  

Users on-line

• 0 users

This list is based on users active over the last 60 minutes.