Xoops Cube Project

File Release Notes and Changelog

Release Name: legacy 2.1.6a

Notes:
In a version of XOOPS Cube Legacy before 2.1.6, XSS(Cross Site Scripting) weakness was discovered.
Please do measures immediately by applying this patch.


Changes:
XOOPS Cube Legacy "Package_Legacy" & "XCube core" Changelog

----------------------------------------
2009/04/02: Package Revision 2.1.6a
----------------------------------------
[Bug Fix - From Bug Tracker]
- Fix Bug IPA#74747784 / JPCERT#95042060 - XSS weakness
- Fix Bug #2350320 - Possibility of script injection in ErrorHandler::show.