No replies to this topic

[Matt]

It has come to our attention that a possible vulnerability may exist in Invision Power Board 1.3 and Invision Power Board 2.0.x.

We have been unsuccessful in exploiting our test boards with the methods given to us but as a precaution we have added additional security in the code to prevent any possible attacks in this area in the future.

As of 18:30 GMT, we have updated the core download files which serve both the licensed version of the board to our customers and the encrypted version of the board for the free trial.

You can update your board by simply using the relevant "post_parser.php" below. Upload "post_parser.php" to your "sources/lib" directory.

This completes the upgrade.


Upgrade for IPB 2.0.0, 2.0.1, 2.0.2, 2.0.3

 2p0.zip   10.02K   6190 downloads

Upgrade for IPB 1.3

 1p3.zip   9.28K   5981 downloads