Expinion.Net

Resources | Projects | Site Map & Navigation Help | HelpConnection.net | Policies

Help Desk

Email to Issue Addon

MultiCalendars

Member Management

iNews Publisher

Free Applications

Requirements

Testimonies

Client Links

Purchase Options

Home | Knowledgebase |Ask Question |My Info |Browser Toolbar

Search |List All Issues |Quick FAQs Only

KNOWLEDGEBASE > ISSUE OVERVIEW

Add to Bookmarks

Security Improvements to MMS 2.1 and NML 2.0
ID: 1308	Category: Applications Support	Status: Resolved	Views: 1644

Question: An upgrade to Member Management System 2.1 and News Manager Lite 2.0 has been released correcting certain reported vulnerabilities. Solution: There are currently no security problems or known issues regarding any Expinion.net applicaitons. The issue described below is not true at the present, nor has it been true for the past 18 months. (It was in fact only known and unfixed for a 24 hour period in the versions described below, in March of 2004.) Despite being notified by us via email within a few days of this occurence, not one single client of Expinion.net had a single security problem related to this issue, and all security upgrades were successful. Ancient History: In March of 2004, an extortion attempt was made by an individual claiming to have found a security breach in 2 of our applications. While there was merit in the claims, the issue was resolved within 24 hours. However, because we refused to pay this individual, we were reported as having security problems despite having already corrected the problem. Both Member Management System and News Manager Lite have had version upgrades since the time this security warning was posted, to correct this potential security problem, and additional upgrade(s) since then! This has been the only occurence of any security problems being reported, with any Expinion applications, and it occured over 18 months ago! For more information on version upgrades, for each application, please visit this page: http://www.expinion.net/res/versions.asp. [--- UPDATED: 9/22/2005 7:03:28 PM BY AGENT: Colleen Wilson ---] A new version featuring some much needed security improvements has been released on 03.21.2004, some of the improvements include protection from script insertion, Cross Site Scripting and SQL injection attacks. The upgrade has been provided 24 hours after it has been reported and affected customers have been notified. If you have any questions please don't hesitate to contact us.
Related Issues: No related issue is available.
Submitted: 3/22/2004		Modified: 11/1/2005

Rate how well this question was answered.

100%

75%

50%

25%

0%

Copyright © 1999-2010 Expinion.net, All Right Reserved. Used under Policies & Terms of Use. 1.888.407.9346