Go Back   Asian Webbies > Announcements and News

Announcements and News New FHG's, new sites, new webmasters joining Asian Webbies, post here

Reply
 
Thread Tools Display Modes
  #1  
Old 01-28-2018, 01:53 PM
jscott's Avatar
jscott jscott is offline
Administrator
 
Join Date: May 2009
Location: Myanmar
Posts: 3,144
Default Mechbunny VERY important

For anyone with Mechbunny tubes/tgps:

Quote:
Mechbunny Tube Script 6.x and Mechbunny TGP Script 1.x, as well as many custom projects we have developed come bundled with CKEditor. It has come to our attention that the version of CKEditor that we distributed with the software is vulnerable to a serious security exploit in it's file manager. This editor is used in the add/edit static page and add/edit text blocks in the admin area. This exploit may have existed for some time but does not seem to appear in the CVE database.

To mitigate this risk, please immediately delete the entire "/includes/ckeditor" directory. We have also contacted some webhosts to inform them of the matter so they can take appropriate measures as well.

It is recommended that you change database passwords on your server as well.

Your add/edit static pages functionality will still work as a normal html text field. 6.0.10 update of the Tube script and 1.0.7 update of the TGP script will contain a new editor.
__________________
My best moneymakers now are:
Chaturbate hot cams, DTICash Japan girls! Bongacash super hot teenie cams, Camdough pinay camgirls
Reply With Quote
Reply

Tags
ckeditor, exploit, mechbunny, tgp script, tube script

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 03:32 AM.



Powered by vBulletin® Version 3.8.1
Copyright ©2000 - 2018, Jelsoft Enterprises Ltd.
Advertise on Asian Webbies here. Visit Japan Porn Videos here.