PostNuke Security Advisory 2005-4
Auteur Sujet
Post 
Résumé :

Local file inclusion via pn_bbcode (third party library used in PostNuke CMS 0.760)

DESCRIPTION
PostNuke is an Open Source, open-development content management system (CMS). PostNuke is still undergoing development, but a large number of core functions are now stabilizing and a complete API for third-party developers is now implemented. The PostNuke CMS Development Team was notified about a security issue within the current .760 stable package relating to the pn_bbcode module which uses the GeSHi library.


http://news.postnuke.com/index.php?...rticle&sid=2726

Données personnelles