Joomla! Discussion Forums

Bugtraq ID:  19605
Class: Input Validation Error
CVE:
Remote: Yes
Local: No
Published: Aug 19 2006 12:00AM
Updated: Aug 19 2006 12:00AM
Credit: Discovery is credited to x0r0n@hotmail.com.
Vulnerable: CropImage CropImage 1.0 beta


#Fix:
1-)open admin.cropcanvas.php
2-)add this code before line 7

defined( '_VALID_MOS' ) or die( 'Direct Access to this location is not allowed.' );

Readmore:
http://www.securityfocus.com/archive/1/443762
http://www.securityfocus.com/bid/19605/info

FYI Cropimage is an abandonned project.
Last release was a beta for 451 in January 2005.

Only place to find it is on P.Lamont's private site Mamboxchange.