Invision Power Services (IPS) has released security patches for IP.Board 3.3.x, IP.Board 3.4.x and IP.Nexus 1.5.x. The patches fix three file inclusion issues and a cross-site scripting (XSS) vulnerability. The file inclusion flaw can be exploited on certain PHP configurations through some of the files designed to run from the command line. An expert who […]
Invision Power Services has released patches to address a cross-site scripting (XSS) vulnerability in IP.Gallery 4.2.1 and 5.05. The XSS security hole is related to Shockwave Flash (SWF) file uploads. Because SWF files allow arbitrary script to execute within the context of the site they are hosted on, we are releasing a patch today which […]
Invision Power Services has released patches for IP.Board 3.3.x and 3.4.x in order to address a couple of cross-site scripting (XSS) vulnerabilities. Artur Czyż and indistic have been credited for finding and reporting the security holes. IP.Board takes precaution against cross site scripting issues by ensuring sensitive forms and buttons have a unique key in […]
Latest Comments