Community Support Forums

Re: Massive Security Hole with File Downloads

2011-08-12T00:43:50-05:00

Thanks for the follow-up.

bluedot wrote:
Just installed, appears to have fixed it!

Big thanks for the quick turn around on this!

Very welcome. Thank you VERY much for reporting this!

Statistics: Posted by Jason Caldwell — August 12th, 2011, 12:43 am

Re: Massive Security Hole with File Downloads

2011-08-12T00:41:28-05:00

Just installed, appears to have fixed it!

Big thanks for the quick turn around on this!

Statistics: Posted by bluedot — August 12th, 2011, 12:41 am

Re: Massive Security Hole with File Downloads

2011-08-12T00:27:05-05:00

Thanks for the heads up on this thread Cristián.

This major security issue has been resolved in the release of s2Member v110812.
Please see this update for details: viewtopic.php?f=46&t=14419

s2Member® v110812 Security Release ( now available! )
http://wordpress.org/extend/plugins/s2member/

IMPORTANT: This release addresses an important security vulnerability in previous releases of the s2Member Framework ( i.e. the free version of s2Member ). Sites with Download Options configured for s2Member should be advised to update to s2Member v110812+ as soon as possible to avoid possible exploits. Changelog is located here: http://wordpress.org/extend/plugins/s2member/changelog/

Statistics: Posted by Jason Caldwell — August 12th, 2011, 12:27 am

Re: Massive Security Hole with File Downloads

2011-08-11T22:49:19-05:00

Awesome! Thanks Jason.

Statistics: Posted by Cristián Lávaque — August 11th, 2011, 10:49 pm

Re: Massive Security Hole with File Downloads

2011-08-11T22:47:24-05:00

Thanks for reporting this important security issue.
~ We're investigating this now.

Statistics: Posted by Jason Caldwell — August 11th, 2011, 10:47 pm

Re: Massive Security Hole with File Downloads

2011-08-11T21:37:00-05:00

Thank you guys. I emailed Jason.

Statistics: Posted by Cristián Lávaque — August 11th, 2011, 9:37 pm

Re: Massive Security Hole with File Downloads

2011-08-11T20:38:12-05:00

Ace, I sent you a PM. I can confirm what Bluedot has posted.

Statistics: Posted by Ciderhelm — August 11th, 2011, 8:38 pm

Re: Massive Security Hole with File Downloads

2011-08-11T19:01:20-05:00

I get a 404 error when I try something like that.

Have you encrypted your website? I'll run some more tests and see if I can replicate the situation.

Statistics: Posted by Bruce C — August 11th, 2011, 7:01 pm

Massive Security Hole with File Downloads

2011-08-11T15:54:31-05:00

----

Statistics: Posted by bluedot — August 11th, 2011, 3:54 pm