Security-hole patched with Boardsolution v1.35

01/16/2008 15:59

2 days ago somebody told my about a security-hole in Boardsolution. Therefore I've just released Boardsolution v1.35 and it is highly recommended to install it! If this is not possible you can also remove the BBCode-tag "img" at Adminarea -> Configuration -> Formatings from the list of the allowed tags. This does not fix the problem completely but makes it more difficult to exploit the hole. For security reasons I don't want to give further information about the security-hole. Besides the closed hole there is no difference to v1.34 because I think it is more important to provide a patch for that as soon as possible than fixing all other known bugs. You can find update-instructions in the following topic: http://forum.script-solution.de/posts_31_3153_1.html