___________                            _____________________ 
\__    ___/___ _____    _____   ___  __\_   _____/\______   \
  |    |_/ __ \\__  \  /     \  \  \/  /|    __)   |       _/
  |    |\  ___/ / __ \|  Y Y  \  >    < |     \    |    |   \
  |____| \___  >____  /__|_|  / /__/\_ \\___  /    |____|_  /
             \/     \/      \/        \/    \/            \/ 
                                                                                                              
                    ---TEAM XFR 2016---
                 XenForo Nulled Community
     
*** - [sCRIPT iNFO]-----------------------------------------------------------

      hOMEPAGE      : Search G00GLE                                 
      pRICE         : Forget it !
      nfo dATE      : May 24, 2016 at 9:24 PM

*** - [iNSTALL nOTES]---------------------------------------------------------

      1. Extract the archive to a folder on your computer
      2. See the InSTALL.txt file for installation instruction

XenForo.v.1.5.8.Full.NULLED.PHP.TEAM.xFR.zip (5.68 Мб)

ОБНОВЛЕНИЕ ОБЯЗАТЕЛЬНОЕ!!! СОДЕРЖИТ ФИКС 2 УЯЗВИМОСТЕЙ.

Originally Posted by Liked

СОДЕРЖИТ ФИКС 2 УЯЗВИМОСТЕЙ.

чего кричишь-то? для экс-четвёрошника всего две уязвимости - ерунда
кстати, а можно подробнее про фиксы?

Originally Posted by Luvilla

чего кричишь-то? для экс-четвёрошника всего две уязвимости - ерунда
кстати, а можно подробнее про фиксы?

English

An image injection vulnerability in SWFUpload. This could allow a user to believe they were loading an image from your domain while it was being loaded from an external domain which may lead to user confusion.
A self-XSS related to uploading an invalid attachment file with a specially crafted filename. This can only be triggered by the user uploading the file, so it would require tricking a user to upload a file using your specified filename (using characters disallowed in filenames by Windows) to exploit. (An XSS may allow an attacker to steal data or cause a user to take actions without their consent or knowledge.)

Originally Posted by Liked

with a specially crafted filename

угу...
имя типо "drop table students"?

где-то эту картинку уже постили...