| Server IP : 103.119.228.120 / Your IP : 3.139.234.124 Web Server : Apache System : Linux v8.techscape8.com 3.10.0-1160.119.1.el7.tuxcare.els2.x86_64 #1 SMP Mon Jul 15 12:09:18 UTC 2024 x86_64 User : nobody ( 99) PHP Version : 5.6.40 Disable Function : shell_exec,symlink,system,exec,proc_get_status,proc_nice,proc_terminate,define_syslog_variables,syslog,openlog,closelog,escapeshellcmd,passthru,ocinum cols,ini_alter,leak,listen,chgrp,apache_note,apache_setenv,debugger_on,debugger_off,ftp_exec,dl,dll,myshellexec,proc_open,socket_bind,proc_close,escapeshellarg,parse_ini_filepopen,fpassthru,exec,passthru,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,popen,show_source,proc_nice,proc_terminate,proc_get_status,proc_close,pfsockopen,leak,apache_child_terminate,posix_kill,posix_mkfifo,posix_setpgid,posix_setsid,posix_setuid,dl,symlink,shell_exec,system,dl,passthru,escapeshellarg,escapeshellcmd,myshellexec,c99_buff_prepare,c99_sess_put,fpassthru,getdisfunc,fx29exec,fx29exec2,is_windows,disp_freespace,fx29sh_getupdate,fx29_buff_prepare,fx29_sess_put,fx29shexit,fx29fsearch,fx29ftpbrutecheck,fx29sh_tools,fx29sh_about,milw0rm,imagez,sh_name,myshellexec,checkproxyhost,dosyayicek,c99_buff_prepare,c99_sess_put,c99getsource,c99sh_getupdate,c99fsearch,c99shexit,view_perms,posix_getpwuid,posix_getgrgid,posix_kill,parse_perms,parsesort,view_perms_color,set_encoder_input,ls_setcheckboxall,ls_reverse_all,rsg_read,rsg_glob,selfURL,dispsecinfo,unix2DosTime,addFile,system,get_users,view_size,DirFiles,DirFilesWide,DirPrintHTMLHeaders,GetFilesTotal,GetTitles,GetTimeTotal,GetMatchesCount,GetFileMatchesCount,GetResultFiles,fs_copy_dir,fs_copy_obj,fs_move_dir,fs_move_obj,fs_rmdir,SearchText,getmicrotime MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/softaculous/impress/ |
Upload File : |
# ImpressCMS ChangeLog ## ImpressCMS 1.4.2 Date: 24 Dec 2020 DB Version: 45 Build Version: 100 This release fixes several bugs that were found during the HackerOne initial penetration test run on the 1.4.1 release. Some improvements and bugfixes are present as well. ### Fixes - 574 Test 1.4 on PHP 7.4 PHP7 (fiammybe) - 692 Include new version of profile PHP7 (fiammybe) - 845 PHP 7.4 : access array offset on value of type null in include/functions.php 1037 php 7.4 (fiammybe) - 852 anti-clickjacking security vulnerability (report #1055589 by jrckmcsb on HackerOne) (fiammybe) - 825 Improve path sanitizing bug security vulnerability (MekDrop) - 814 Better sanitize database queries in installer bug (report #983710 by solov9ev on HackerOne) (fiammybe) - 637 Notice on admin pages in PHP 7.4 duplicate php 7.4 (fiammybe) - 843 Fix the amount of cookies (fiammybe) - 805 Missing templates in system module (skenow) - 838 Remove whitesource config (Mekdrop) - 834 + 836 Limit maximum length of password (report #1033373 by f1v3 on HackerOne) (fiammybe) - 821 Fixed possible file system exposing due language cookie on installer (MekDrop) - 812 Prevents using submitted filenames with ../ for controller (report #1035311 by siva12 on HackerOne) (MekDrop) - 815 Better sanitize database queries in installer (report #983710 by solov9ev on HackerOne) (fiammybe) - 811 Remove phpopenid example folder bug (report #1042838 by hackerone_success on HackerOne) (fiammybe) - 810 more strict comparison of variables (report #1036883 by hodorsec on HackerOne) (fiammybe) - 806 Include the missing templates for the image manager (skenow) - 603 Issue with image inclusion on TinyMCE (fiammybe) ### Improvements - 636 errors in form fields on admin account creation page of the installer (fiammybe) - 848 Cleanup deprecated functions in functions.php (fiammybe) - 694 remove the icms_banner reference. No longer present (fiammybe) ## ImpressCMS 1.4.1 Date: 07 Jul 2020 DB Version: 45 Build Version: 98 This release fixes several bugs that were present in the 1.4.0 release, some of them with security impact. ### Fixes - Stored XSS on ImpressCMS 1.4.0 ( #659 ) @Mekdrop - Existence of banners folder results in errors ( #600 ) @fiammybe - module admin menu is not shown in 1.4 ( #604 ) @skenow - ImageManager : admin can no longer preview images ( #590 ) @skenow - Fatal error during installation at page_tablescreate.php ( #576 ) @skenow - Test 1.4 on PHP 7.3 ( #573 ) @fiammybe - Login in Chrome points to blank page ( #100 ) @fiammybe ## ImpressCMS 1.4.0 Date: 19 Dec 2019 DB Version: 45 Build Version: 96 ### Improvements - curl extension in installer now is requirement not optional (#530) @MekDrop - PHP7 improvements based on mamba7x PR (#507) @fiammybe - make expiration header dynamic in the past (#504) @fiammybe - check mysql using PDO now (#487) @fiammybe - Add a warning when PHP used is below 7.2 ### Fixes - Move prototype inclusion so trust_path creation works fixes #569 (#571) @skenow - Fixed PathStuffController's constructor (#528) @MekDrop - Fixed suppressed warning if variable $options['folderName'] is undefined or empty when creating theme (1.4.x) (#510) @MekDrop - Fixed function signatures in icms_image_Handler (1.4) (#512) @MekDrop - Fixed installer collation selection (#529) @MekDrop - Fix the template handling in the system module (#503) @fiammybe - Add a warning when PHP used is below 7.2 ### Update - Protector update for PDO SQL sanitizing Close #496 (#497) @skenow - Update Protector for PHP7 (#492) @skenow - Update php requirements to 5.6 (#505) @fiammybe - Update of Smarty to 2.6.31 (the latest 2.x release) - Update of CSS-tidy to work in PHP7 - PHPMailer update to 5.2.7 - PHPOpenID updated for better PHP7 compatibility ### Removed - Removed installation_notify (#566) @MekDrop - Remove admin template folder in system module on upgrade (#509) @fiammybe ==================== ImpressCMS 1.3.11 ------------------------------- Date: 08 dec 2018 DB Version: 44 Build Version: 91 ##Security Fix XSS vulnerabilities in installer (as found by Omar Kurt, security researcher at Netsparker (https://www.netsparker.com) ##Improvements 109 - Add extra metadata types property and itemprop 121 - System module now shows the correct version number after install 316 - Add extra languages in installer and core ##Fixes 102 - pagination in the backend generates wrong URLs 116 - Update the links to our website 119 - Update system requirements in installer 117 - update links to translations in installer ##Update 296 - Update HTMLPurifier to 4.10 297 - Update GeSHI to 1.0.8.13 299 - Update jQuery to 3.3.1 125 - Upgrade PHPMailer to 5.2.26 ImpressCMS 1.3.10 ------------------------------- Date: 30 december 2016 DB Version: 43 Build Version: 82 ##Fixes 913 - Comment preview loses text of comment 930 - correct the link to the adsense wiki pages 925 - Illegal string offset 'options' core/datafilter in PHP 5.6 919 - System imagemanager clone UI-side feature redirects to invalid URL 922 - Templates for Adsenses ACP cannot be overridden ##Security 927 - SSRF vulnerability in image manager 931 - Vulnerability in PHPMailer 5.2.18