"Powerful. Simple. Secure"
Published by AlexC, Mar 21, 2010
A file upload filter bypass was reported by Nick Freeman which allowed the possibility to upload and execute a PHP script. Due to the requirements of the environment for this exploit to work, we are treating this as a very low risk issue.
Published by AlexC, Dec 14, 2009
Media items uploaded through the media module were accessible outside of TangoCMS, allowing users to bypass the ACL security checks by simply sharing a URL to the file.
Published by AlexC, Jun 29, 2009
An XSS vulnerability was discovered within the internal 'Html' library, due to an incorrectly handled string that could be provided by the user.