The vB Geek

Go Back   The vB Geek > vB Geek Products > Geek Article and Review System

Geek Article and Review System GARS is the mega popular system for turning forums into articles, tutorials, or even reviews.

Advertisement
  Learn how to remove ads

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1  
Old 05-28-2007, 08:56 PM
The Geek's Avatar
The Geek The Geek is offline
Senior Member
 
Join Date: Aug 2005
Posts: 6,717
Geek Article and Review System License Holder GeekMart License Holder Geek Auto-Linker Pro License Holder Geek Advertising Banner License Holder Geek Gazette License Holder 
Default GARS 2.1.8b & 2.1.8c release discussion

As much as I hate releasing another update so soon after the last one, it has come to my attention of a potential XSS flaw in all versions of GARS previous to 2.1.8b

There are 3 options for fixing this issue:
  • If you are running GARS 2.1.8, then download the latest package and upload the following files from the new package (you do not have to update your product xml):
    • geek/gars/includes/gars_class_core.php
    • geek/gars/includes/gars_class_page.php
  • If you are running a version older than 2.1.8 then I stongly suggest that you upgrade to 2.1.8b to take full advantage of bug fixes (inluding this security fix). Please check out the 2.1.8 release thread on upgrading.
  • If you can not currently upgrade GARS but want to apply the fixes, you can manually edit the 2 affected files by following the text file attached to this post.
Please leave this thread open for discussion of 2.1.8b. Post bugs or feature requests in Project Tools or start a new thread to troubleshoot.
FYI, the latest package is 2.1.8c. Read here
Attached Files
File Type: txt xss.txt (1.4 KB, 99 views)

Last edited by The Geek; 06-02-2007 at 11:24 PM..
Reply With Quote
 

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
GARS 2.1.7 Release discussion The Geek Geek Article and Review System 47 05-22-2007 01:15 PM
GARS 2.1.1 Release Discussion The Geek Geek Article and Review System 23 12-13-2006 12:15 PM
GARS 2.1.0 Release Discussion The Geek Geek Article and Review System 32 12-12-2006 09:32 AM
GARS 2.0.2 Release Discussion The Geek Geek Article and Review System 15 11-17-2006 09:36 AM
GARS 1.01 Release Discussion The Geek Geek Article and Review System 37 04-11-2006 07:52 PM


All times are GMT. The time now is 11:26 AM.


Powered by vBulletin® Version 3.8.5
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.