Sexy Polling Security Vulnerability Notification

Find out what does your audience think

Sexy Polling Security Vulnerability Notification

New postby htbridge » Wed Jan 08, 2014 8:35 pm

Hello,

High-Tech Bridge Security Research Lab has discovered a security vulnerability in Sexy Polling Joomla Extension.
Preview available here: https://www.htbridge.com/advisory/HTB23193
Developers can contact us by email: advisory (at) htbridge.com for details.

For any questions related to this notification message - please visit our General Information & Disclosure Policy page: https://www.htbridge.com/advisory/discl ... olicy.html

Best regards,
High-Tech Bridge Security Research Lab
htbridge
 
Posts: 1
Joined: Wed Jan 08, 2014 8:30 pm

Re: Sexy Polling Security Vulnerability Notification

New postby Simon » Wed Jan 08, 2014 10:41 pm

Hi,

Thanks for informing that.

We have corrected the issue, and updated the version in JED.

Best Regards,
Simon
User avatar
Simon
Site Admin
 
Posts: 1306
Joined: Wed Jul 13, 2011 8:53 pm

Re: Sexy Polling Security Vulnerability Notification

New postby rob001 » Sat Jan 11, 2014 7:35 pm

In the section of my download is still visible version 1.0.8. Also Joomla shows me no new update.
rob001
 
Posts: 7
Joined: Thu Jan 09, 2014 10:18 pm

Re: Sexy Polling Security Vulnerability Notification

New postby Simon » Tue Jan 14, 2014 7:39 pm

Hi,

We have updated the PRO package too. Please download version 1.0.9, and update the extension.

Best Regards,
Simon
User avatar
Simon
Site Admin
 
Posts: 1306
Joined: Wed Jul 13, 2011 8:53 pm

Re: Sexy Polling Security Vulnerability Notification

New postby rob001 » Wed Jan 15, 2014 11:30 am

Is it enough just to replace the affected files? If so, which files are affected?
rob001
 
Posts: 7
Joined: Thu Jan 09, 2014 10:18 pm

Re: Sexy Polling Security Vulnerability Notification

New postby Simon » Wed Jan 15, 2014 6:27 pm

Yes, it is enough.
Just replace components/com_sexypolling/vote.php

Best Regards,
Simon
User avatar
Simon
Site Admin
 
Posts: 1306
Joined: Wed Jul 13, 2011 8:53 pm

Re: Sexy Polling Security Vulnerability Notification

New postby rob001 » Sat Jan 18, 2014 12:16 pm

Thanx for this first class support!!

A proposal:
It would be really good if you could make the count down (part of Sexy polling) as a Standalone Modul.

I think that would buy some
rob001
 
Posts: 7
Joined: Thu Jan 09, 2014 10:18 pm

Re: Sexy Polling Security Vulnerability Notification

New postby Simon » Sun Jan 19, 2014 12:03 am

You are welcome. And thanks for suggestion.

Best Regards,
Simon
Regards,

Simon Poghosyan - 2GLux Team

If you use our extensions, please post a rating and a review at the Joomla! Extensions Directory.
User avatar
Simon
Site Admin
 
Posts: 1306
Joined: Wed Jul 13, 2011 8:53 pm


Return to Sexy Polling

Who is online

Users browsing this forum: No registered users and 1 guest