تبيه 4image

السلام عليكم
حبيت ابلغكم انه كل واحد مركب سكربت التوبيكات او اي سكربت 4images فهمو معرض للاختراق اذا لم يرقي للنسخة 1.7.7 لانه فيها ترقيعات امنيه كثيرة عن 1.7.6 و قد جرى التنبيه المصدر موقع الشركة
http://www.4homepages.de/forum/index.php?topic=24794.0




View Profile WWW


Re: 4images 1.7.7
« Reply #1 on: May 14, 2009, 08:57:00 AM »

================================================== =======
ChangeLog Version 1.7.7
================================================== =======
- Security fix for local inclusion vulnerability (http://www.4homepages.de/forum/index.php?topic=24526.0)
- Security Fix for XSS issue in member.php
- Fixed issue for search stop in english language (http://www.4homepages.de/forum/index.php?topic=24453.0)
- Fixed issue for accepting blank new password when changing password (http://www.4homepages.de/forum/index.php?topic=24503.0)
- Fixed incorrect text in additional fields in register.php (http://www.4homepages.de/forum/index.php?topic=19206.0)
- Fix for redirects on sites with non-standard port (http://www.4homepages.de/forum/index.php?topic=23081.0)
- Fix for losing IPTC data if converting images with ImageMagick
- Fixed issue with wrong Administrator joindate after installation of 4images
- Fixed issue Comments count not updated after user was deleted (http://www.4homepages.de/forum/index.php?topic=22606.0)
- Fix for additional user fields not being used for guests (http://www.4homepages.de/forum/index.php?topic=22727.0)
- Fix issue in top.php if the name of an image is an URL
- Fix for wrong message in ACP if image was not deleted from database (http://www.4homepages.de/forum/index.php?topic=23392.0)
- Fix for issue that redirects after login always to index.php (http://www.4homepages.de/forum/index.php?topic=22950)
- Fixed issue if users submits a non existing email address in the password forgotten form
- Fixed width of columns in detailed view (detail, EXIF, IPTC)
- Change of the displayed error information if the MySQL connection does not work
- Change from POST to GET in category dropdown
- Changed in header.html template for being W3C valid
- Added favicon
- Added thumbnails to RSS-feed
- Added feature to sort categories
- Added more conditional tags (categories, details,index, member, postcards, register, search, top) for using {if index}...{if index} for homepage, {if details}...{endif details} for details.php page, etc.
- Added META-Tags in header.html template: robots, description, keywords, revisit-after, imagetoolbar.
- Added spanish language pack by default
- Added 2 new templates: 960 pixel width, 100 % width


و اغلبها ثغرات امنيه و sql injection - xss

اذا اردت نرقي لك شوف رابط العرض
http://www.traidnt.net/vb/showthread...1#post11492653
يكفيك قراءة ردود العملاء :shiny01::shiny01::icon30::icon30::icon30::icon31: :blushing:




اذا اعجبك الموضوع يمكنك التقييم و الرد

شكرا لجميع من رد و لو بكلمه او تقييم :blushing: