• info
• discussion
• exploit
• solution
• references

Magnolia CE 'ActivationHandler' URL Security Bypass Vulnerability

Solution:
The vendor released an update to address this issue. Please see the references for more information.


Magnolia Magnolia CE 3.5

• Magnolia magnolia-tomcat-bundle-3.5.4-bundle-jdk14.tar.gz
  http://downloads.sourceforge.net/magnolia/magnolia-tomcat-bundle-3.5.4 -bundle-jdk14.tar.gz?modtime=1201870459&big_mirror=1

Magnolia Magnolia CE 3.5.1

• Magnolia magnolia-tomcat-bundle-3.5.4-bundle-jdk14.tar.gz
  http://downloads.sourceforge.net/magnolia/magnolia-tomcat-bundle-3.5.4 -bundle-jdk14.tar.gz?modtime=1201870459&big_mirror=1

Magnolia Magnolia CE 3.5.2

• Magnolia magnolia-tomcat-bundle-3.5.4-bundle-jdk14.tar.gz
  http://downloads.sourceforge.net/magnolia/magnolia-tomcat-bundle-3.5.4 -bundle-jdk14.tar.gz?modtime=1201870459&big_mirror=1

Magnolia Magnolia CE 3.5.3

• Magnolia magnolia-tomcat-bundle-3.5.4-bundle-jdk14.tar.gz
  http://downloads.sourceforge.net/magnolia/magnolia-tomcat-bundle-3.5.4 -bundle-jdk14.tar.gz?modtime=1201870459&big_mirror=1