× OS Property released notes

OS Property 3.12.9 released - Security issue fixed!!!

  • Dang Thuc Dam
  • Dang Thuc Dam's Avatar Topic Author
  • Offline
  • Administrator
  • Administrator
More
5 months 2 weeks ago - 5 months 2 weeks ago #110149 by Dang Thuc Dam
The OS Property developer team are proud to announce the resolved security issue of in OS Property. The issue came from Advanced Search tool of OS Property.

Project: OS Property extension
Impact: High
Severity: Low
Versions: 3.12.7 or lower
Exploit type: SQL injection
Reported Date: 2018-Feb-22
Fixed Date: 2018-Feb-27

Description
The lack of type casting of a variable in SQL statement leads to a SQL injection vulnerability in Advanced Search tool of OS Property extension.

Affected Installs
OS Property 3.12.7 or lower

Solution
Upgrade to version 3.12.9
Last edit: 5 months 2 weeks ago by Dang Thuc Dam.

Please Log in or Create an account to join the conversation.

  • Nicholas Johnson
  • Nicholas Johnson's Avatar
  • Offline
  • Senior Boarder
  • Senior Boarder
More
5 months 2 weeks ago #110165 by Nicholas Johnson
Replied by Nicholas Johnson on topic OS Property 3.12.9 released - Security issue fixed!!!
I am getting parsererror when installing this?

Please Log in or Create an account to join the conversation.

Moderators: Dang Thuc Dam