A security patch is now available for Campsite which addresses an immediate code injection vulnerability. All users of Campsite 3.2 and up are strongly advised to apply this patch (users of 3.2.x should first upgrade to 3.3.5 – instructions here). It is available for download at the end of this article or at SourceForge here and here. Read on for instructions.
The patch addresses an SQL injection vulnerability reported to the Campsite team by Stefan Esser as part of the Month of PHP Security (http://php-security.org/). As part of the month’s activities, testers tried a number of different open source PHP applications for SQL injection vulnerabilities, and, unfortunately, they reported one in Campsite.
The vulnerability is specifically in the TinyMCE text editor’s article attachment functions, and the patch closes the vulnerability.
We urge all Campsite users on versions 3.2 and up to immediately apply this patch. Here’s how:
- Download campsite_security_fix_files-20100430.tar.gz:
Unpack it and you will get ArticleAttachment.php and attachments.php files. Users must overwrite following files with the ones provided:
classes/ArticleAttachment.php
and
javascript/tinymce/plugins/campsiteattachment/attachments.php
This method can be used for Campsite installations on shared hosting.
OR
If you have terminal access to your Campsite installation:
- Download campsite_security_fix-20100430.patch:
1) Change to your Campsite document root (ex. /var/www/campsite/)
$ cd /var/www/campsite
2) Apply the patch
$ patch -p1 < /path/to/campsite_security_fix.patch
Users of Campsite 3.2.x should first upgrade to the latest Campsite version (currently 3.3.5), and then apply the patch.
If you have difficulties applying these patches, please check the Campsite support forum at http://forum.sourcefabric.org/index.php/f/10/.
Continue reading " IMPORTANT: Security patch released for Campsite versions 3.2 and up "