여기에서 디지문호스팅에 대한 호불호를 논하셔도 좋고 일상 다반사에 관한 이야기를 올리셔도 좋습니다. 정치/종교적 색채가 너무 짙거나 광고/스팸성 게시물만 제외하곤 모두 환영합니다.
글 수 702
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
적용패치 : XE CSRF 보안취약점 패치
제보자 : INet Corp Security 연구소장, 유동훈님(Xpl017Elz, x82)
내용 : CSRF라는 공격 수단으로 XE의 관리자 세션을 악용할 수 있는 취약점을 통해 관리자 권한을 탈취당할 수 있음
패치된 파일 : func.inc.php (이상 1개 파일)
비고 : 최초의 XE 보안 취약점 긴급 패치
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
(제가 정리해서 제 홈페이지에 올린 내용입니다.)
공식 홈페이지 공지글
http://www.zeroboard.com/17234648
제로보드XE 쓰시는 분들~
파일 한개만 패치하면 되니까 패치해주세요~~
(참고로 인터넷에 CSRF 라는 공격 수단 퍼질날 얼마 안 남았습니다.)
적용패치 : XE CSRF 보안취약점 패치
제보자 : INet Corp Security 연구소장, 유동훈님(Xpl017Elz, x82)
내용 : CSRF라는 공격 수단으로 XE의 관리자 세션을 악용할 수 있는 취약점을 통해 관리자 권한을 탈취당할 수 있음
패치된 파일 : func.inc.php (이상 1개 파일)
비고 : 최초의 XE 보안 취약점 긴급 패치
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
(제가 정리해서 제 홈페이지에 올린 내용입니다.)
공식 홈페이지 공지글
http://www.zeroboard.com/17234648
제로보드XE 쓰시는 분들~
파일 한개만 패치하면 되니까 패치해주세요~~
(참고로 인터넷에 CSRF 라는 공격 수단 퍼질날 얼마 안 남았습니다.)
좋은 정보 감사합니다. 바로 적용했습니다.