Download XennoBB 1.0.5

Many websites have a forum where users can engage in various discussions with each other. To do this in a well-arranged form, a handy piece of software is needed so that you can assign different rights with which the forum can be managed. XennoBB is one of these forum packages and does its job on a web server with PHP 4.3 or later and MySQL, PostgreSQL or SQLite. The developers have released version 1.0.5 which fixes two XSS vulnerabilities. The announcement looks like this:

Due to the fact that two XSS vulnerabilities were found in the last version, I added fixes for them, also some minor code tweaks and changes, two fixes made by pulsar and one bug reported by soj, fixed by me.

Also, the URL rewriting functionality has been extended with new rules and now, every page of the forum is crawlable by the search crawlers. Hopefully, this will be the last release in the 1.0 tree.

For those upgrading from 1.0.4, you can only overwrite the files:

view_topic.php
view_forum.php
view_poll.php
login.phpmisc.php
include/parser.php
include/functions.php
include/plugins/a_Smilies.php

and those who have URL rewriting activated, rename htaccess.txt from the 1.0.5 package to .htaccess and replace the one already on the server. Don’t forget to make backups.