IP.Board 3.0.x / 3.1.x Security Update and Mobile API Update

[[R] NuclearGeneral]

A minor security issue has been discovered within the forum password system that could allow exposure of topic titles in password-protected forums. This issue does not allow the topics to be viewed and only affects forums that are password protected.

 

We have released a simple patch for this issue. To apply, simply download the correct zip file and upload the file(s) over the ones on your server. There is no need to rebuild or reset any templates or language packs. Customers with active support are welcome to ask technical support for assistance if required.

 

IP.Board 3.0.x

http://community.invisionpower.com/public/style_extra/mime_types/zip.gif patch-feb-3.0.zip (10.87K)

Number of downloads: 6

 

IP.Board 3.1.x

http://community.invisionpower.com/public/style_extra/mime_types/zip.gif patch-feb-3.1.zip (17.9K)

Number of downloads: 58

 

In addition to the security patch described above, the IP.Board 3.1.x patch also includes an update to our mobile API designed to resolve some issues, provide better integration for our iPhone application and to provide IP.Gallery 4.0 support alongside IP.Gallery 3.2.x.

 

The main download zips have been updated at the time of this post so if you have downloaded after the date of this message you do not need to apply this patch.

 

View the full article at IPS