EL PaperBoy
Well-known member
- #1
Thread Owner:
EL PaperBoy
We are releasing a patch for IP.Content 2.3.6 to address a potential security vulnerability in the search system.
It has been brought to our attention that there is a potential vulnerability within the IP.Content search system and even though the vulnerability was only a proof of concept, we felt it best to issue an update.
To apply the patch
Simply download the attached zip and upload the files to your forum server. You do not need to run any scripts or the upgrade system.
Credit
Our thanks to security researcher Jamieson O'Reilly (au.linkedin.com/pub/jamieson-o-reilly/70/b64/13a/, dringen.blogspot.com.au) for his assistance with this issue.
ip_content_patch_july_2014.zip 7.1KB 1985 downloads
Note if you are an IPS Hosting you do not need to apply this patch. It will be automatically applied.
Continue reading...
It has been brought to our attention that there is a potential vulnerability within the IP.Content search system and even though the vulnerability was only a proof of concept, we felt it best to issue an update.
To apply the patch
Simply download the attached zip and upload the files to your forum server. You do not need to run any scripts or the upgrade system.
Credit
Our thanks to security researcher Jamieson O'Reilly (au.linkedin.com/pub/jamieson-o-reilly/70/b64/13a/, dringen.blogspot.com.au) for his assistance with this issue.

Note if you are an IPS Hosting you do not need to apply this patch. It will be automatically applied.
Continue reading...