PopPhoto Studio has been updated to patch a serious security vulnerability that could leave a server open to being compromised by malicious attackers by using a specially designed URL to include and execute remote PHP code.
Full details of the vulnerability are described in the Secunia security advisory SA SA20087 published on the 15th of May 2006.
The vulnerability only affects servers where the PHP configuration setting register_globals is turned on. PopPhoto does not require this value to be on and all users are advised to turn it off where possible in addition to applying the new security patch.
An updated version of PopPhoto (version 3.6.1) can be downloaded from the PopPhoto version history page which also provides details of the bug and a link to the file change log where you can see which file has been updated.
This security vulnerability is specific to PopPhoto Studio and does not affect Pixaria Gallery.
del.icio.us Digg itCute iPhone Stand from magneticNorth
Thursday, March 18, 2010
Pixaria Roadmap Update
Friday, March 12, 2010
Pixaria News Gets Comments
Thursday, February 18, 2010
Documentation Update
Tuesday, February 16, 2010
Is this 'FaceBook Login'?
Friday, February 12, 2010
Pixaria Gallery 2.8.0 Released
Tuesday, February 9, 2010
Pixaria 2.7.9 Now Available
Thursday, January 7, 2010
Welcome to 2010
Friday, January 1, 2010
Advertising Experiment
Thursday, December 31, 2009
Offline Between Dec 19th and 29th
Friday, December 18, 2009
In association with Amazon, here are some great book recommendations to help you get started using Pixaria Gallery and support continued development - all at the same time!
