Blog

CMS Made Simple 1.0.8 Released!

June 18th, 2007 by Samuel Goldstein

Sorry to have to report this, but a new security issue was brought to our attention today. Ted had it fixed in just a few minutes, and released version 1.0.8.

This vulnerability could result in unauthorized access to your CMS, so we strongly recommend that you update any CMS Made Simple installations you have on the open internet.

Thanks to [dren] and Rift for bringing the problem to our attention.

8 Responses to “CMS Made Simple 1.0.8 Released!”

  1. David Elfstrom Says:

    Unfortunately http://dev.cmsmadesimple.org is not responding - it’s timing out, so we can’t download the update.

  2. Ted Says:

    For some reason, that whole server is down. I have a ticket in and hopefully it’s back up momentarily.

  3. Andre G. Says:

    Just to help others I post this hint here:

    I updated from 1.0.6 on 3 systems, 3 different behaviours.

    One system fine, two systems had problem with the MenuManager 1.4.1 . The website contained no menu, but php errror log did does not complain.

    The Menu “Layout” Entry was missing , only when I browsed the listmodules.php , I saw the module.
    PHP.log says: Call to a member function GetFriendlyName() on a non-object in ….moduleinterface.php on line 117

    Luckily it ran after clicking on the deinstallation link (+ install again). So not a big problem, if you know what to do.
    But on one of the two systems it reinstalled Menumanager 1.3 , so I had to update it from .xml again.

    So: everything fine if you know how to solve it.

    All 3 systems were on the same server, but installation time was different in the past. Maybe this is the reason for different results.

    Thanks for continous updates to the team,
    hope this helps,
    Andre

  4. Bobonov Says:

    Me too I had exactly the same problem with menu manager.
    CMSMS simply said that it is not installed.
    So I reinstalled it, got an error (If I remeber correctly it was about a class redeclaration) and afterward worked fine.
    This happen in updating from 1.0.6 to 1.0.7.
    Didn’t try 1.0.8 yet

  5. Ron Says:

    Damn, can’t download the latest version!

    Does someone has the file up somewhere else?

  6. tie Says:

    I can’t wait for the 1.1 release :) With all this delay I really hope it will be stable. I will add it to the ScriptWizard installer as soon as you release it.

  7. Erik Says:

    In version 1.07 suddenly the embed function and fetch url (if you want to use an existing html page) do not work anymore. Gonna try 1.08 and hope it will work..

  8. maddin_the_brain Says:

    Unfortunately the update doesn’t work on my homepage. The CMSMS doesn’t work anymore, only an empty page is the response for the request. :-(

Leave a Reply