XOOPS Uploader Class Arbitrary File Upload Vulnerability

Solution:
The vendor released a patch to address this issue. Please see the references for more information.


Xoops Xoops 2.0.16 core

Xoops Xoops 1.3.10

Xoops Xoops 1.3.5

Xoops Xoops 1.3.6

Xoops Xoops 1.3.7

Xoops Xoops 1.3.8

Xoops Xoops 1.3.9

Xoops Xoops 2.0.10

Xoops Xoops 2.0.11

Xoops Xoops 2.0.12

Xoops Xoops 2.0.12 a

Xoops Xoops 2.0.13 .1

Xoops Xoops 2.0.13 .2

Xoops Xoops 2.0.14

Xoops Xoops 2.0.15

Xoops Xoops 2.0.2

Xoops Xoops 2.0.3

Xoops Xoops 2.0.5

Xoops Xoops 2.0.5 .1

Xoops Xoops 2.0.5 .2

Xoops Xoops 2.0.9 .3

Xoops Xoops 2.0.9 .2

Xoops Xoops 2.2.1

Xoops Xoops 2.2.3 RC1

Xoops Xoops 2.2.3


 

Privacy Statement
Copyright 2010, SecurityFocus