31
Bug Fixes & Patches / Re: PHP 8 Fix for V1.9
« Last post by kp on October 31, 2022, 10:53:13 AM »Hey,
I'm not a responsible person but I kept on eye on your post.
As I can see, the first "bug" is within the Admin area. So nobody could go there and can do something bad. On the other hand it looks for me, that 4images is cleaning all parameters.
So are you really sure that there is a real bug? I can't really find out on the page what the result is with this security tool.
About Cross Site Scripting I had not looked at yet.
I'm not a responsible person but I kept on eye on your post.
As I can see, the first "bug" is within the Admin area. So nobody could go there and can do something bad. On the other hand it looks for me, that 4images is cleaning all parameters.
So are you really sure that there is a real bug? I can't really find out on the page what the result is with this security tool.
About Cross Site Scripting I had not looked at yet.
Thank you.
Hello there. There are 2 security vulnerabilities here, I wonder if the developers can release a patch for it? Thanks in advance, it's urgent.
https://packetstormsecurity.com/files/163818/4images-1.8-SQL-Injection.html
https://packetstormsecurity.com/files/162946/4Images-1.8-Cross-Site-Scripting.html
Versions 1.8 and 1.9 seem to be affected.