We have identified an issue with the Calendar application present in IP.Board 2.3.6 and 3.0.5. This issue can allow a visitor to delete events in the Calendar even if the user does not have the proper permissions to do so. Other than the ability to delete events without permission there are no other security risks with this issue.
Please apply this patch if you are using IP.Board version 2.3.6 or 3.0.5 and you are using the Calendar application. If you do not use the Calendar application then there is no need to be concerned with this update.
Patch files are attached to this topic. The main downloads for IP.Board 2.3.6 and 3.0.5 have been updated.
Source: Click Here
Welcome to DevFuse Forums
- Start new topics and reply to others
- Subscribe to topics and forums to get email updates
- Get your own profile page and make new friends
- Send personal messages to other members.
Guest Message by DevFuse
(View All Products)Featured Products
Help fund your forum with donations, setup goals and track member donations. Offer rewards for members donating.
Have your members submit their race times and share with others.
Allows your members to submit their own videos for community viewing. Support is included for all the major video sites.
Build your own forms for your members without coding experience. Support included for pm, email and topics.
Build a community database of items for your members. Full features custom fields included.
Calendar Application Patch for IP.Board 2.3.6 and 3.0.5
No replies to this topic
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users