Re: MODx Installation File XSS Vulnerability
First, it's not a workaround to remove the install directory after installing MODx; it's a absolute requirement, and there is even a checkbox that will do it for you if PHP has permission to remove the files.
Second, no one at or associated with modxcms.com was notified of this in any way, shape or form, on June 16, 2010.
How is this a medium severity? This is absolute nonsense, total FUD, and a complete non-issue. You should never leave the install directory in place or you have much bigger problems than XSS injection.
討論串 (同標題文章)
完整討論串 (本文為第 3 之 3 篇)：