OtomiGenX News
Brought to you by:
anduz
Security alert
due checking trough Google with keyword “OtomiGen.X 2.2 (lang) Local File Inclusion Vulnerabilities”, it’s important to change the script at rss.php on line 49
session_start();
include $cCfg->setLanguage($_SESSION['userID'], $_SESSION['userType'], $_GET[lang]);
you can delete this two lines or comment it
#session_start();
#include $cCfg->setLanguage($_SESSION['userID'], $_SESSION['userType'], $_GET[lang]);
Now you can download the ultimate version of OtomiGen.X, follow the installation instruction, if any question you can contact me at lemba.sono[at]gmail.com