Posted by Agileware on February 2, 2010 at 11:03pm
| Download | Size | md5 hash |
|---|---|---|
| signwriter-6.x-2.0-beta2.tar.gz | 46.58 KB | 62ccc745ec297dab7f7783caa5bceb0c |
| signwriter-6.x-2.0-beta2.zip | 49.9 KB | b3e800c93d7fc32ffd677d4b9f514923 |
Last updated: December 24, 2010 - 23:48
* Added php version to info file to restrict to version 5 and up due to the use of features not available in php4.
- See #591800: Parse error: syntax error, unexpected '=', expecting ')' in /sites/all/modules/signwriter/signwriter.module on line 532
* SECURITY FIX - Fixed a security bug that allows arbitrary PHP code to be executed when using a signwriter
profile as an input filter, leading to a Cross Site Scripting vulnerability.
Any users with the ability to use input filters with signwriter profiles are able to exploit this vulnerability.