The vulnerability, which was uncovered earlier this week during a routine third-party audit of the software’s source code, allowed for the possibility of a malicious MySQL injection.
According to Oystein Wright, CEO of Mansion Productions, no attacks capitalizing on the exploit were observed and the company’s quick, proactive measures allowed it to patch all existing MPA3 installations.
MPA3 clients were notified of the issue and the company’s quick response.
“No webmaster or member information was reported as being compromised to Mansion's knowledge at this time," Wright told XBIZ.
Related:
