Re: [cobalt-users] userList.php possible exploit

[Anders <andersb@xxxxxxxxxxx>]

H.P. Noordam wrote:

>> PS. Note that it is "only" viewing, modifying gives errors.
> 
> hmm i guess the inability to actualy SAVE the screens you can get, takes the
> real bite out. Still, it is quite stupid that any user can see just about
> everything from other hosted sites.

Indeed, but I guess the Qube 3 from which the RaQ 550 GUI came
never had those problems... (since it doesn't do virtual hosts)
 
> a quick searh on the forums & KB didnt get me a thread about prior solutions
> so i guess the issue is too old, do you know if there was an "official" way
> to patch the code, or is it left to the users ?

There is no offical way, and no offical response. Left to the customers.

--anders