MDForum security fix - MAXdev - MDPro the most easy to use and feature rich GPL CMS

Mar 10, 2010 | 09:11 PM

Welcome

• Register | Login
• Documentation
• Search
• Get /give help

Don't have an account yet? You can create one, it is free, just click here

as a registered user you have some advantages like free downloads, comments and posting on our forums, depending upon this site's configuration and options.

Set font size:

Small fonts
Default fonts
Big fonts

• • Control Panel - Register - Login • •

Search site | Areafiles | About MDPro | MDPro features | Site map

Current Stable MDPro Lite 1.0821

Welcome

Download MDPro package

Forums

Documentation

MDPro design tutorials

Language Packs

MDChannels

Permissions

MDLite Dev documentation

Developer documentation

MAXdev Community

Latest Comments

Re: Have you receive...
العاب ون - &#...

odai

Re: MDContact 3
We will release a new version in next days, we are work...

TiMax

Re: MDContact 3
Mdpro is great, I can't find these features anywhere el...

irmadilley

Support and security : MDForum security fix

Posted by : TiMax - Sunday, December 27, 2009

The MAXdev team has been notified of a security issue by http://www.secunia.com the problem was found to be a SQL Injection Vulnerability in MDForum discovered by Stefano Angaram

The patch is available from <img src="modules/Tinymax/tiny_mce/plugins/filemanager/InsertFile/img/ext/zip_small.gif" alt="mdforum_patch_2612.zip" /> mdforum_patch_2612.zip (<span style="font-size: 80%">12.60 KB) this affects all versions of MDForum 2.xx just replace file in modules/MDForum/includes

We strongly recommend all users apply this patch to their sites ASAP

TiMax

MDForum security fix | Login/Create an account | 0 Comments

Comments are owned by their poster. We aren't responsible for their content.

web design by
PointNet