Forum Plugin Version 2.7.2 - Security Fix

Contributed by: Blaine on Sunday, January 25 2009 @ 12:57 pm EST

Last modified on

An issue that can allow someone to edit another users recently posted topic has been identified by Matthew Demicco. This is possible during the edit timeframe which by default is 1 min and requires someone to modify the URL.

This new release addresses that issue and all sites are recommended to upgrade to this latest release which is now available in the downloads area.

The upgrade steps are to replace the changed files and run the plugin upgrade.

• public_html/createtopic.php
• config.php
• functions.inc

Comment (0)

Geeklog - Forum Plugin Version 2.7.2 - Security Fix
https://www.geeklog.net/article.php/20090125125737979