Security issue in AdvancedForm and AdvancedNews Plugins
Posted: Wed Sep 08, 2010 8:47 pm
Security issue in AdvancedForm and AdvancedNews Plugins by jat-at-home.be
There's a potential security issue in the two popular plugins
Advanced Form and Advanced News.
The problem is in both, the freeware and the payware, versions of that plugins included.
Updating or deleting all installations is highly recommended!
If you not use the plugins anymore you must delete the files from the server!
It's not enough to delete the scripting-calls from the content or the template!
For the most used freeware versions we can provide a "quick fix":
Advanced News 1.0.4: download fix
Advanced Form 1.6.4: download fix
If you use a plugin with this version, you can fix the issue by overwriting the files on your server
with the files in the downloads above. But be sure to have the right version installed
(and a backup on your harddisk
).
Another way is updating to a newer version. JAT provides new free downloads at his homepage.
Please check http://jat-at-home.be/index.php?CMSimple_plugins for details.
Users of the payware-versions should receive updates from the author. Beside this the newest (former payware) versions
become available as free GPL - versions ASAP at http://www.cmsimplewiki.com.
At this point we want to thank Jan Kanters (JAT) for his help and cooperation and, last but not least,
for giving his plugins for free under the GPL to the community!
Holger
There's a potential security issue in the two popular plugins
Advanced Form and Advanced News.
The problem is in both, the freeware and the payware, versions of that plugins included.
Updating or deleting all installations is highly recommended!
If you not use the plugins anymore you must delete the files from the server!
It's not enough to delete the scripting-calls from the content or the template!
For the most used freeware versions we can provide a "quick fix":
Advanced News 1.0.4: download fix
Advanced Form 1.6.4: download fix
If you use a plugin with this version, you can fix the issue by overwriting the files on your server
with the files in the downloads above. But be sure to have the right version installed
(and a backup on your harddisk
).Another way is updating to a newer version. JAT provides new free downloads at his homepage.
Please check http://jat-at-home.be/index.php?CMSimple_plugins for details.
Users of the payware-versions should receive updates from the author. Beside this the newest (former payware) versions
become available as free GPL - versions ASAP at http://www.cmsimplewiki.com.
At this point we want to thank Jan Kanters (JAT) for his help and cooperation and, last but not least,
for giving his plugins for free under the GPL to the community!
Holger