FluxCMS

[matthew1112]

Does anyone know if there was any exploit patches for flux cms as people are claiming it has sql exploits.

 

[Central]

@JayCustom - I searched for Flux and brought up this guy. He might help you.

 

[JayC]

As far as I am aware, no one has brought to my attention any exploits and we had no issues when we were public. I do not believe it has any.

 

[matthew1112]

Ah just Jack-x someone managed to unban himself after a mip ban... and said there was a sql injector but i thought it was bullshit.

 

[JayC]

I will gladly take a look at how, and I will update this thread with the fix. My guess is the MIP ban just didn't process on the emu or something and allowed him back in the client.

 

[Viper]

I have heard that there are a few exploits because some people have managed to use SQL Injector or another exploit to rank themselves, ban users etc.

 

[JayC]

I looked into it, and it was just a glitch in the emulator. The first attempt to add the MIP disconnected the user from the emulator , but did not add the record to the database. The 2nd ban did add the record. Because this emulator doesn't have a log file I cannot see the full error of why it didn't - but he did not SQL inject.