FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

codeigniter -- file upload class vulnerability

Affected packages
		codeigniter	<	1.7.2_1

Details

VuXML ID	0502c1cb-8f81-11df-a0bb-0050568452ac
Discovery	2010-07-12
Entry	2010-07-21

Derek Jones reports:

A fix has been implemented for a security flaw in CodeIgniter 1.7.2. All applications using the File Upload class should install the patch to ensure that their application is not subject to a vulnerability.

[source]

References

URL	http://codeigniter.com/news/codeigniter_1.7.2_security_patch/
URL	http://www.phpframeworks.com/news/p/16365/codeigniter-1-7-2-security-patch