Версия: 1.2.11

Here's a short message announcing 1.2.11. This release has been made primarily to address an issue with the registration script that allowed a malicios user to perform a denial-of-service attack. PunBB 1.2.11 adds code to the registration script that prevents these flood registrations (an hour has to pass between registrations from the same IP). On top of this, an XSS vulnerability has been addressed.

For those of you not afraid to edit the scripts manually, here are the two changes:

http://punbb.ru/redirect-ddea3be9ddc17b8c584fe00d964ef5e76c8e7e78-838.html
http://punbb.ru/redirect-618d02bb32e71e7318020425f40831ab4b728305-838.html

Thanks to the people who alerted me via e-mail about the circulation of an "exploit" for the DoS attack.