Download Latest Version impresscms_2.0.2.zip (24.0 MB)
Email in envelope

Get an email when there's a new version of ImpressCMS

Home / v1.4.2
Name Modified Size InfoDownloads / Week
Parent folder
impresscms-1.4.2.zip 2020-12-26 24.2 MB
impresscms-1.4.2.tar.gz 2020-12-26 21.8 MB
README.md 2020-12-24 2.0 kB
Totals: 3 Items   46.0 MB 0

This release fixes several bugs that were found during the HackerOne initial penetration test run on the 1.4.1 release. Some improvements and bugfixes are present as well.

Fixes

  • [#574] Test 1.4 on PHP 7.4 PHP7 (fiammybe)
  • [#692] Include new version of profile PHP7 (fiammybe)
  • [#845] PHP 7.4 : access array offset on value of type null in include/functions.php 1037 php 7.4 (fiammybe)
  • [#852] anti-clickjacking security vulnerability (report [#1055589] by jrckmcsb on HackerOne) (fiammybe)
  • [#825] Improve path sanitizing bug security vulnerability (MekDrop)
  • [#814] Better sanitize database queries in installer bug (report [#983710] by solov9ev on HackerOne) (fiammybe)
  • [#637] Notice on admin pages in PHP 7.4 duplicate php 7.4 (fiammybe)
  • [#843] Fix the amount of cookies (fiammybe)
  • [#805] Missing templates in system module (skenow)
  • [#838] Remove whitesource config (Mekdrop)
  • [#834] + [#836] Limit maximum length of password (report [#1033373] by f1v3 on HackerOne) (fiammybe)
  • [#821] Fixed possible file system exposing due language cookie on installer (MekDrop)
  • [#812] Prevents using submitted filenames with ../ for controller (report [#1035311] by siva12 on HackerOne) (MekDrop)
  • [#815] Better sanitize database queries in installer (report [#983710] by solov9ev on HackerOne) (fiammybe)
  • [#811] Remove phpopenid example folder bug (report [#1042838] by hackerone_success on HackerOne) (fiammybe)
  • [#810] more strict comparison of variables (report [#1036883] by hodorsec on HackerOne) (fiammybe)
  • [#806] Include the missing templates for the image manager (skenow)
  • [#603] Issue with image inclusion on TinyMCE (fiammybe)

Improvements

  • [#636] errors in form fields on admin account creation page of the installer (fiammybe)
  • [#848] Cleanup deprecated functions in functions.php (fiammybe)
  • [#694] remove the icms_banner reference. No longer present (fiammybe)
Source: README.md, updated 2020-12-24