Announcement

Collapse
No announcement yet.

Cross Site Scripting Fix for V7.07

Collapse
X
Collapse
 
  • Page of 1
  • Filter
  • Time
  • Show
Clear All
new posts
Previous template Next
    #1

    Cross Site Scripting Fix for V7.07

    Further to my post here that I posted regarding a security vulnerability with Actinic software, I contacted Actinic Support who supplied me with a set of files patched for Actinic V7.0.7

    Simply extract the zip file
    Copy the six files into your "site1" folder on your PC
    Then Upload

    This fixed an issue we had with a XSS Possible Injection vulnerability on our website, which was failing a PCI Compliant test.

    Thanks to Actinic Support for this invaluable fix.

    ANYONE THAT REQUIRES THESE FILES, PLEASE FEEL FREE TO CONTACT ME - EMAIL THROUGH PROFILE
    Tags: None
    #2
    Whilst I think you have acted good faith and that this post may also help many others, I do not think it is a good idea to post what may be seen as the internal guts of Actinic on the forum.

    As Actinic support have already highlighted to you in their response email it is not a good idea to draw attention to the fact that any site may be vulnerable. Rather point anyone concerned to Actinic support to supply the script modifications required.

    Having the scripts here itself may pose a further security risk in that no one can be sure that further modifications have not been made by you or a hacker or example. (I'm not suggesting in any way of course that you would do that - just highlighting the fact that it could happen)

    Comment

      #3
      Originally posted by drounding
      Whilst I think you have acted good faith and that this post may also help many others, I do not think it is a good idea to post what may be seen as the internal guts of Actinic on the forum.
      Yes, fair point Duncan, have removed the attachment, and posted anyone requiring these files to contact me direct for a quick reply, or of course Actinic themselves.

      Comment

        #4
        Are these files still available?

        Comment

          #5
          The people to ask would be Actinic Support. Contactable by phone or via the Actinic website.

          Mike
          -----------------------------------------

          First Tackle - Fly Fishing and Game Angling

          -----------------------------------------

          Comment

            #6
            I still have them - have uploaded them here for you (and anyone else)
            these are the files that were sent to me from actinic support themselves.

            hope they help you as much as they did for me.

            http://hotfile.com/dl/24892089/e44c3...ch707.zip.html

            Comment

              #7
              Many Thanks Gavin

              Comment

              Previous template Next
              Working...
              X