For the first time with AdaptCMS, Insane Visions has issued an urgent security fix. This recent security hole was discovered by the group at Milw0rm. Upon hearing about this security hole we immediately fixed the problem in a matter of minutes and are now issuing this fix.

The Security Hole was related to the new "Check User" feature in AdaptCMS Lite 1.3 and AdaptCMS Pro 1.3. When signing up you would enter the username desired, once moving to the password field a box would appear saying whether the username was taken or not. The issue was the PHP that checks to see if the username is taken did not use any safe guards incase of SQL injection. The worst consequence is the stealing of the MD5 hash of a users password but NO passwords themselves were vulnerable to this problem.

This fix is simply one file which goes into the "includes/" folder. We recommend that all AdaptCMS Lite users upload this fixed file immediately. Thank you.

Download AdaptCMS 1.3 Fix

 email

 website

I use OneCMS as the backend of my site, VisionPS3.com. Why? Because OneCMS is the best content management system that I have ever used, it is also very easy, extremely customizable, and has a very small learning curve. In addition, it comes backed by one of the most knowledgeable programmers that I know, which is Chuck, the creator of OneCMS. He never hesitated to get hands-on with the small amounts of problems I ran into, as he knows the CMS like the back of his hand. A big thanks goes out to the creator of OneCMS for creating, managing, and helping with the greatest CMS on the web!