Community

Welcome guest. Please login or register.

Replying to [IPS news] Calendar Application Patch for IP.Board 2.3.6 and 3.0.5

Enter a name

Enter your name

Confirm Code

Your unique security code

Post

[quote name='IPS News' date='03 March 2010 - 03:15 PM' timestamp='1267629359' post='2309']
We have identified an issue with the Calendar application present in IP.Board 2.3.6 and 3.0.5. This issue can allow a visitor to delete events in the Calendar even if the user does not have the proper permissions to do so. Other than the ability to delete events without permission there are no other security risks with this issue.

Please apply this patch if you are using IP.Board version 2.3.6 or 3.0.5 [b]and[/b] you are using the Calendar application. If you do not use the Calendar application then there is no need to be concerned with this update.

Patch files are attached to this topic. The main downloads for IP.Board 2.3.6 and 3.0.5 have been updated.	<h4></h4>	[list]					[*]				[url="http://community.invisionpower.com/index.php?app=core&module=attach&section=attach&attach_id=22317"][img]http://community.invisionpower.com/public/style_extra/mime_types/zip.gif[/img][/url] [url="http://community.invisionpower.com/index.php?app=core&module=attach&section=attach&attach_id=22317"]2.3.6.zip[/url] [b](16.58K)[/b]
: 9					[*]				[url="http://community.invisionpower.com/index.php?app=core&module=attach&section=attach&attach_id=22318"][img]http://community.invisionpower.com/public/style_extra/mime_types/zip.gif[/img][/url] [url="http://community.invisionpower.com/index.php?app=core&module=attach&section=attach&attach_id=22318"]3.0.5.zip[/url] [b](18.13K)[/b]
: 37			[/list]

[url=http://community.invisionpower.com/topic/305862-calendar-application-patch-for-ipboard-236-and-305/]View the full article[/url]
[/quote]

Options

Post Options

Enable emoticons?

Post icon

[ Use None ]

or Cancel

Topic Summary

IPS News

Posted 03 March 2010 - 03:15 PM

We have identified an issue with the Calendar application present in IP.Board 2.3.6 and 3.0.5. This issue can allow a visitor to delete events in the Calendar even if the user does not have the proper permissions to do so. Other than the ability to delete events without permission there are no other security risks with this issue.

Please apply this patch if you are using IP.Board version 2.3.6 or 3.0.5 and you are using the Calendar application. If you do not use the Calendar application then there is no need to be concerned with this update.

Patch files are attached to this topic. The main downloads for IP.Board 2.3.6 and 3.0.5 have been updated. <h4></h4>