Kunena 6.2.6 released

The Kunena team has announce the arrival of Kunena 6.2.6 [K 6.2.6] which is now available for download as a native Joomla extension for J! 4.4.x/5.0.x. This version addresses most of the issues that were discovered in K 6.1 / K 6.2 and issues discovered during the last development stages of K 6.2

Question Full path disclosure downloading attachments

More
8 years 9 months ago #11 by xillibit
Replied by xillibit on topic Full path disclosure downloading attachments
The userid should appear in the path and in your case it doesn't appear...

I'am investigating on the issue actually, but if you set protected attachments on ON the path of attachment that you can see when you hover it is the following :

mysite.com/kunena_test/index.php/forum/attachment/5

I don't provide support by PM, because this can be useful for someone else.

Please Log in or Create an account to join the conversation.

More
8 years 9 months ago #12 by Texpaok
Replied by Texpaok on topic Full path disclosure downloading attachments
Hi xillibit,

When I discovered the issue, the protect attachments option was set to OFF. After that, I enabled it, edited a post and uploaded a file but the issue still remained...

Regards,
Jose

Please Log in or Create an account to join the conversation.

Time to create page: 0.388 seconds