this add-on has not been updated for over a year, at least the files included in the zip file, it says 2004-2005 in files, latest from phgstats says 2004-2006.
just make sure that you have Register_Globals turned off and you're safe for any exploits. I sure hope that this user can update the core files for vb 3.6.4 and phgstats 0.6.9b (latest) though.................................
edit:
safe version is 0.5.2+, version included on the zip file is 0.5 which makes anyone using this vulnerable.
IRC, quakenet irc
#woah-projekt
contact balgo.
|