Warning: include(/data/vollmerk/ampache.org/docs/templates/header.inc) [function.include]: failed to open stream: No such file or directory in /data/vollmerk/ampache.org/docs/announce/3_3_1_7.php on line 2
Warning: include() [function.include]: Failed opening '/data/vollmerk/ampache.org/docs/templates/header.inc' for inclusion (include_path='.:/usr/share/php:/usr/share/pear') in /data/vollmerk/ampache.org/docs/announce/3_3_1_7.php on line 2
This release fixes some unescaped id's in the object constructors which could allow an authenticated user
to retrive an object other then the one they were handed
v.3.3.1.7, 02/10/2005:
- Fixed some unescaped ID's in the class constructors which would
allow a logged in user to pull an object of their choosing
this exploit requires a working login and password
Contact:
IRC: irc.ampache.org #ampache (Freenode)
Forums: Forums
Bugs: Bugs
E-mail: dev AT ampache.org
Enjoy!
-Karl Vollmer
Ampache Development Team
Warning: include(/data/vollmerk/ampache.org/docs/templates/footer.inc) [function.include]: failed to open stream: No such file or directory in /data/vollmerk/ampache.org/docs/announce/3_3_1_7.php on line 25
Warning: include() [function.include]: Failed opening '/data/vollmerk/ampache.org/docs/templates/footer.inc' for inclusion (include_path='.:/usr/share/php:/usr/share/pear') in /data/vollmerk/ampache.org/docs/announce/3_3_1_7.php on line 25