2010-07-20, 05:29:38
Putting this up here so you all know where we stand on this, I just received this email back from Mike (n00dles):
Of course we will be looking into this, but it’s not really a matter of concern for current live websites.
Mike Wrote:Yeah saw those the other day, tried MOST of them and yes you do need to be logged in for them to work.So unless you’re afraid of hacking into your own GetSimple installation after having logged in these aren’t the highest priority vulnerabilities ever to be discovered.
Of course we will be looking into this, but it’s not really a matter of concern for current live websites.
“Don’t forget the important ˚ (not °) on the a,†says the Unicode lover.
Help us test a key change for the core! ¶ Problems with GetSimple? Be sure to enable debug mode!
Help us test a key change for the core! ¶ Problems with GetSimple? Be sure to enable debug mode!