Jump to content

Welcome to IPB skins - Skinbox
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message will be removed once you have signed in.
Login to Account Create an Account
Photo

[IP.Services] IP.Board Security Update


  • Please log in to reply
No replies to this topic

#1
IPS News

IPS News

    Advanced Member

  • Bot
  • PipPipPip
  • 304 posts
It has come to our attention that a XSS (Cross Site Scripting) attack is possible within the Admin CP. The javascript is only executed when viewing the detailed pop-up of a specific failed admin log in.

This issue exists in all IP.Board 3 versions. We recommend that everyone using these versions apply this simple one file patch.

Simply download the zip for your IP.Board version, expand the zip on your computer and upload the file to the relevant folder on your server. The directory structure is maintained in the zip so you will have no issues finding the file.

If you need assistance, please contact technical support.


IP.Board 3.2.x
Posted Image feb_3_2_x.zip 2.72K 29 downloads

IP.Board 3.1.x
Posted Image feb-3_1_x.zip 2.76K 10 downloads

IP.Board 3.0.x
Posted Image feb-3_0_x.zip 2.76K 5 downloads


If you are running a version of IP.Board older than those listed we highly recommend you upgrade to the latest, supported version as it will include this and other fixes.

View the full article




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users