To the moderators

Hi all

I´ve posted today something here on this forum regarding a possible world wide exploit and when come back to read i can´t find my original post.

Did I do anything wrong or bad?

Thank you all

Hi Wilson.

I'm not aware of any post being moved yet, however if it was then I would assume it was because we'd prefer not to have security risks publicly posted until we have a fix available for people to use, thus trying to minimise the risk to users websites.

Basically the fewer people who know, the fewer people who might try to use the exploit.

However I see you mention a world wide exploit so I assume it might not actually be ImpressCMS specific? if this is the case then I'm not sure why.

I'm sure if it was moved the person who moved it will read this and reply or send you a message.

I'll also look into this for you, to get you an answer.

Please accept my apologise for the inconvenience.

Hi Wilson.

It does appear your post was moved, the issue will be investigated to ensure there is no risk and if there is then a fix will be made promptly.

Thank you for bringing this to our attention!

I'm not yet sure who moved it, but please again accept my apologies.

Hi Tom

Thanks for your reply.

No problem at all. I just came here in order to get some "words of wisdom" from our experts and trying to find out if the same happens to someone else.

Quote:

Yep, youre right! The issue ocurred with diferent versions of xoops (including 2018) and with Impress 1 ín diferent servers/ countries.

Sorry if I did it in a wrong place.

PS. in order to not scare me to death, please next time send me a PM

Thank you Tom

Hi Wilson, eu não tenho acesso em sua mensagem original, enviar no meu e-mail ou do Rodrigo, please.

Hi Wilson.

Quote:

You did the right thing, I think perhaps it's not clearer enough on the ImpressCMS websites how people should report security related issues.

I've just proposed we create a security related link in the sub headers of these sites which would direct to a form where users can make their reports or at minimum a page which would give clear information and advice on how to report security issues.

Quote:

I'm still not entirely sure who removed your post, but I'm looking into it, I've sent a mail to users with moderator access and requested that as a courtesy all users should be informed when their post is edited or removed.

Quote:

No problems

From Giba

Quote: