IPBSupport News 8 Report post Posted July 31, 2014 We are releasing a patch for IP.Content 2.3.6 to address a potential security vulnerability in the search system. It has been brought to our attention that there is a potential vulnerability within the IP.Content search system and even though the vulnerability was only a proof of concept, we felt it best to issue an update. To apply the patch Simply download the attached zip and upload the files to your forum server. You do not need to run any scripts or the upgrade system. Credit Our thanks to security researcher Jamieson O'Reilly (au.linkedin.com/pub/jamieson-o-reilly/70/b64/13a/, dringen.blogspot.com.au) for his assistance with this issue. ip_content_patch_july_2014.zip Note if you are an IPS Hosting you do not need to apply this patch. It will be automatically applied. Quelle: http://community.invisionpower.com/topic/402014-ipcontent-23x-security-update/ Share this post Link to post