Login or create new account.

By registering on joomprod.com, you will have immediate access to all our free products and to the public side of our support forum.

Enjoy our subscriptions.

Each of our subscriptions allow you to enjoy the private side of the support forum and all the update of our products for a period ranging from 3 months to 1 year.

Payment And immediate download.

After subscribing to one of our subscription, the products are immediately downloadable.

Login

Or Register
Accueil / forum / Public Forum / Main Forum / [FIXED] vulnerability in OLD AdsManager version

Support Availability Because we must sleep sometimes

Working days: Monday to Friday.
Reply time: Depending on the complexity of your support issue it's usually between a few hours to 48 hours.

Support is only guaranteed to paid subscribers

AdsManager - End of life

It is with great regrets that we have chosen to end the developpement of Adsmanager and its other associated components.

AdsManager is born 10 years ago and, as of today, the number of new subscriptions and downloads have fallen and we cannot maintain the component anymore.

All active subscribers will be able to continue enjoying support until the end of their subscription.

The components will be free and no support will be provided anymore for the other users.

×

Notice

The forum is in read only mode.

  1. forum
  3. Public Forum
  5. Main Forum
  7. [FIXED] vulnerability in OLD AdsManager version
× OLD Forum post could be checked here : forum.joomprod.com

[FIXED] vulnerability in OLD AdsManager version

More
11 years 3 months ago - 11 years 3 months ago #12652 by scilla
[FIXED] vulnerability in OLD AdsManager version was created by scilla
Hello to All,

I want to share with you my recent encounter with AdsManager 3.1.1 Free version.

Downloaded it, installed, configured and while tests were conducted i discovered that the pictures upload does not work even if the files are meeting all the requirements set in administration. Please, check the screen of my chrome inspector

I have contacted my hosting company and they told me that there is a vulnerability problem with this feature and sent me this link: www.exploit4arab.net/exploits/1621

I hope the developers will act accordingly and correct this hole.

Best regards,
Scilla
Attachments:
Last edit: 11 years 3 months ago by tompap.
The following user(s) said Thank You: adarr
More
11 years 3 months ago #12657 by loic
Replied by loic on topic Important!!! vulnerability in AdsManager 3.1.1.
Hello,

This issue was resolved a year ago and affect only the version between the 2.6 and the 2.9.13 not included.

You can find more info here : www.joomprod.com/news/273-security-issue...-on-old-version.html

The person who has posted this old issue created a great deal of problems for a lot of users and we are very sorry for that.

Severl hosting company has also blocked the use of this plugin but you can assure them that this issue is resolved.

Best regards.
The following user(s) said Thank You: adarr
More
11 years 3 months ago #12658 by scilla
Replied by scilla on topic Important!!! vulnerability in AdsManager 3.1.1.
Thank you for your replay, but i am using the latest version 3.1.1. and my hosting company still do not want to allow your component.

The products is very good and i would like to buy it, but first i want to be sure it is ok.

Any suggestions?
The following user(s) said Thank You: adarr
More
11 years 3 months ago #12714 by tompap
Replied by tompap on topic Important!!! vulnerability in AdsManager 3.1.1.
Could you please send me by email (This email address is being protected from spambots. You need JavaScript enabled to view it.) the name of the host company and if you have a contact with them).

it's really strange that they don't want to allow our component, seems in fact, the vulnerability was a old one (already fixed more than 1 year ago)
Joomla itself as a upload issue last year, but your host company allow Joomla. so...

Regards,
The following user(s) said Thank You: adarr
More
11 years 3 months ago #12755 by scilla
Replied by scilla on topic Important!!! vulnerability in AdsManager 3.1.1.
Hi,

The company name is Superhosting - www.superhosting.bg

I have managed to convince them. The component is flagged as "Secured" in their automated systems. In two words - Everything is ok!

Regards!
The following user(s) said Thank You: adarr
More
11 years 3 months ago #12780 by loic
Replied by loic on topic Important!!! vulnerability in AdsManager 3.1.1.
Great news :).

I'm glad everything is resolved.

Have a nice day.
The following user(s) said Thank You: adarr
Moderators: perry
  1. forum
  3. Public Forum
  5. Main Forum
  7. [FIXED] vulnerability in OLD AdsManager version
Time to create page: 0.054 seconds
Powered by Kunena Forum