MyBB 1.8.24 Released — Security Release - Printable Version +- Makestation (https://makestation.net) +-- Forum: Technical Arts (https://makestation.net/forumdisplay.php?fid=45) +--- Forum: Web Design & Internet (https://makestation.net/forumdisplay.php?fid=62) +---- Forum: MyBB Related (https://makestation.net/forumdisplay.php?fid=120) +---- Thread: MyBB 1.8.24 Released — Security Release (/showthread.php?tid=3129) |
MyBB 1.8.24 Released — Security Release - tc4me - August 9th, 2020 https://blog.mybb.com/2020/08/09/mybb-1-8-24-released-security-release/ MyBB 1.8.24 Released — Security Release RE: MyBB 1.8.24 Released — Security Release - Darth-Apple - August 10th, 2020 Thank you very much for posting this. I wouldn't have caught it in a timely manner, they have a high risk vulnerability in this one. Update has been run. They changed a surprisingly large amount of files in this release (not sure why, 1823 just came out and 1824 was a security release), so there will likely be a few bugs. As always, post any issues discovered here! RE: MyBB 1.8.24 Released — Security Release - Kyng - August 13th, 2020 I got this done on the day of release - and, so far, I haven't encountered any bugs from it. Hope you don't either! RE: MyBB 1.8.24 Released — Security Release - tc4me - August 14th, 2020 (August 10th, 2020 at 11:17 PM)Darth-Apple Wrote: Thank you very much for posting this. I wouldn't have caught it in a timely manner, they have a high risk vulnerability in this one. But there is a bug in creating multiple profile fields go to: inc / functions_post.php (near ~ line 445) after PHP code: if($post['fieldvalue_option'] != '') { eval("\$post['fieldvalue'] .= \"".$templates->get("postbit_profilefield_multiselect")."\";"); } and insert directly below: PHP code: $post['fieldvalue_option'] = ''; |