Xenforo 2.1.11

[hrace009]

XenForo is a commercial Internet forum software package written in the PHP programming language. The software is developed by former vBulletin lead developers Kier Darby and Mike Sullivan. The first public beta release of XenForo was released in October 2010, the stable version on March 8, 2011.[1] The program includes several search engine optimization (SEO) features.

On November 12, 2014, Chris Deeming joined the development team. One of his products, Xen Media Gallery, now XenForo Media Gallery, joined the XenForo family of products. [2]

Xenforo - Compelling Community Forum Software
Read more about this resource...

 

[hrace009]

hrace009 updated Xenforo with a new update entry:

XenForo 1.5.10 NULLED

Today, we are pleased to release XenForo 1.5.10. This release fixes several bugs and issues that were found since the release of 1.5.9.

Most importantly, this release includes a fix for a security issue that we found during internal testing. The issue is known as a server-side request forgery (SSRF). This could allow an attacker to use your server to bypass your server's firewall and make internal requests. Depending on the services found, this could lead to privilege escalation or remote...

Read the rest of this update entry...

 

[hrace009]

hrace009 updated Xenforo with a new update entry:

XenForo 2.1.1

XenForo 2.1.1 is now available for all licensed customers to download. We recommend that all customers running previous versions of XenForo 2.1 upgrade to this release to benefit from increased stability.

We have also made some improvements to the importer framework. Notably it is now possible to perform a multi-process import in order to make better use of multi-core processors. If you run an import via the CLI and you add the --processes option with a value greater...

Read the rest of this update entry...

 

[hrace009]

hrace009 updated Xenforo with a new update entry:

Xenforo 2.1.11 - Nulled

Today, we are releasing XenForo 2.1.11 to address a potential security vulnerability. We recommend that all customers running XenForo 2.1 upgrade to 2.1.11 or use the attached patch file as soon as possible. (For customers running XenForo 2.0, we can only recommend upgrading to the latest version.)

The issue is a cross site request forgery (CSRF) on the login form. This may allow an attacker to unexpectedly log users into an attacker-controlled account. In some scenarios, this may cause...

Read the rest of this update entry...