View Single Post
  #4  
Old 08-04-2009, 06:55 AM
  Ene's Avatar 
Ene Ene is offline
 

X-Cart team
  
Join Date: Aug 2004
Posts: 907
 

Default Re: Security bulletin 4 Aug 2009

Quote:
Since this patch only affects one file (at least for version 4.1.9):

/skin1/modules/Advanced_Statistics/advanced_stats.tpl

The patch for all versions affects this file only.

Quote:
If Advanced Stats were disabled, was there ever a vulnerability?

No. If the Advanced Stats module is disabled and you don't use it, you are safe. However you may be in danger if you enable it later.
__________________
Eugene Kaznacheev,
Evangelist/Product Manager at Ecwid: http://www.ecwid.com/ (since Sept 2009)

ex-Head of X-Cart Tech Support Department
ex- X-Cart Hosting Manager - X-Cart hosting
ex-X-Cart Technical Support Engineer


Note: For the official guaranteed tech support services please turn to the Customers HelpDesk.
Reply With Quote