Jump to content

* * * * - 3 votes

IP.Gallery 4.2.x and 5.0.x Security Update

  • Please log in to reply
No replies to this topic

#1 IPS News

IPS News

    Public Relations

  • IPS Staff
  • 1,065 posts

Posted 08 February 2013 - 02:58 PM


Security Update: 7th February 2013

A cross-site-scripting (XSS) exploit has been discovered in IP.Gallery. We are releasing a security update for versions 4.2.x and 5.0.x today to patch this issue.


Patching is very easy.

  1. Identify the version of IP.Gallery you are running.
  2. Download and unzip the appropriate patch file below that matches your version.
  3. Upload the contents of the zip to your /public/js directory, overwriting the existing file.

IP.Gallery 4.2.x
Attached File  ipg42_feb13.zip   831bytes   2139 downloads

IP.Gallery 5.0.x
Attached File  ipg5_feb13.zip   2.41KB   2950 downloads


  • When you apply the security update the bulletin in your AdminCP will still display. We keep the bulletin in place for at least a week after a security release.
  • Our main software packages accessed via the client area have already been updated with this security update.



Our thanks to Mohamed Ramadan ( Attack-Secure.com / https://twitter.com/Attack_Secure ) for bringing this to our attention.

  • The Old Man, Nuclear General, Azoun and 321 others like this

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users