新版本XOOPS加強了安全性,同時升級了以下函式套件Smarty 2.6.27TinyMCE 3.5.8jQuery 1.8.3jQueryUI 1.10程式運作完全支援目前較新的PHP 5.4版本。Security fixes:
- XSS/CSRF vulnerability in system/admin/groupperm.php (Dingjie Yang,Qualys/trabis)
- XSS/CSRF vulnerability in system/modulesadmin/main.php (Dingjie Yang,Qualys/trabis)
- XSS/CSRF vulnerability in system/admin/blocksadmin/main.php (Marcin,Ariko-Security Team/trabis)
- LFI vulnerability in system/admin/tplsets/jquery.php (Marcin,Ariko-Security Team/trabis)
Added:
- Fast Comment Hack (Voltan)