3 Aug 2013, 5:43 AM
Totally Zenned
- Join Date:
- Feb 2009
- Location:
- UK
- Posts:
- 1,326
- Plugin Contributions:
- 0
Google Notice: Vulnerability of Minify (CJ Loader) versions
Whilst looking into a problem I have with CJ Loader, installed with an earlier version of Tabbed Products Pro, I came across this on 23 July 2013, in the News section:
On some PHP systems, file system functions accept parameters containing null bytes
("\x00"), but do not handle them correctly. See:
http://www.php.net/manual/en/security.filesystem.nullbytes.phpAn attacker may be able to use Minify to reveal the contents of any file PHP has access to
within the document root, including sensitive configuration files.......You are strongly encouraged to upgrade to Minify 2.1.7
http://code.google.com/p/minify/
It may not be Zen Cart applicable.
Simon