Greetings,
Some possible cross site scripting and SQL insertion issues were brought
to our attention by James Bercegay of the GulfTech Security Research
Team.
Please take a moment to read the information from this page, download
and apply the patch.
http://phpwebsite.appstate.edu/downloads/security/
Thanks to James Bercegay of the GulfTech Security Research Team for
working with us on this.
We will explain the hack after people have had a chance to patch. We
will also discuss measures we have taken for future versions to prevent
such hacks.
Thanks,
phpWebSite Development Team
--
Matthew McNaney
Internet Systems Architect
Electronic Student Services
Appalachian State University
Phone: 828-262-6493
http://phpwebsite.appstate.edu
http://ess.appstate.edu
|
