[pmwiki-users] [pmwiki-devel] BlogIt Vulnerability

Amos Satterlee satterle at gmail.com
Mon Jul 4 17:25:35 CDT 2011


Wow. Thanks for the quick fix.

Amos


On Mon, Jul 4, 2011 at 5:16 PM, DaveG <pmwiki at solidgone.com> wrote:
> Working with Petko, BlogIt version 1.7.0 has been released. Please upgrade
> immediately. This is a critical bug fix, correcting the vulnerability
> identified.
>
>  ~ ~ DaveG
>
>
> On 7/3/2011 5:16 PM, DaveG wrote:
>>
>> A vulnerability in BlogIt (http://www.pmwiki.org/wiki/PITS/01258) was
>> identified which could allow a an attacker access to the account hosting
>> PmWiki.
>>
>> A fix will be posted as soon as possible. In the meantime please
>> '''disable''' BlogIt entirely by commenting out the BlogIt include
>> statement.
>>
>> Apologies for the inconvenience this will cause.
>>
>>
>> ~ ~ DaveG
>>
>> _______________________________________________
>> pmwiki-devel mailing list
>> pmwiki-devel at pmichaud.com
>> http://www.pmichaud.com/mailman/listinfo/pmwiki-devel
>>
>
> _______________________________________________
> pmwiki-users mailing list
> pmwiki-users at pmichaud.com
> http://www.pmichaud.com/mailman/listinfo/pmwiki-users
>



More information about the pmwiki-users mailing list