Go Back   Website Hosting - VPS Hosting - Domain Registration Ireland :: Blacknight > Technical Support > Security Notices

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 12-08-05, 09:32 AM
Junior Member
 
Join Date: May 2004
Posts: 18
Default Gallery PostNuke Integration Security Issue

A security issue has been reported in Gallery, which can be exploited by malicious users to bypass certain security restrictions.

The security issue is caused due to incorrect use of the global "$name" variable to determine the gallery name in "classes/postnuke0.7.1/User.php". This can be exploited by PostNuke users with any admin privilege levels to gain access to other user's albums.

Solution:
The problem has been fixed in version 1.5.1-RC2
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply

Tags
gallery, integration, issue, postnuke, security

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Wordpress User Security Issue blacknight Security Notices 1 16-01-07 08:30 AM


All times are GMT. The time now is 12:20 AM.


VPS Hosting Web Hosting Ireland Blacknight Blog Blacknight Status

Powered by: vBulletin Version 3.7.3, Copyright ©2000 - 2008, Jelsoft Enterprises Limited.
Blacknight 2005 - 2008 | VPS Hosting

SEO by vBSEO 3.2.0

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17