Home

XHP CMS 0.5.1 released

XHP CMS News — 2006-03-23T23:05:58+02:00

Bucharest, Romania - March 24, 2006

Target IT today announced the immediate availability of the latest version of its open source content management software, XHP CMS v0.5.1.

Version 0.5.1 has been launched on March 24th 2006 in response to a critical vulnerability.

The addressed vulnerability is described here:
http://xhp.targetit.ro/index.php?page=3&box_id=34&action=show_single_entry&post_id=10
http://secunia.com/advisories/19353/
http://www.osvdb.org/displayvuln.php?osvdb_id=24059
http://www.osvdb.org/displayvuln.php?osvdb_id=24058

Also included in this release are two patches previously published for v0.5 that solve a blog page generation issue and an installation issue connected to MySQL.

To update from a previous version (4.0 and up) just copy the new files over the old ones (except dbconfig.php and install.php).

Please visit http://xhp.targetit.ro/ to see XHP in action, download the core, modules, templates, documentation, language packages and join the growing XHP community.

XHP CMS - eXpandable Home Page [ http://xhp.targetit.ro ] is an easy to install, easy to use, easy to expand content management system (CMS) written in PHP and using MySQL as the database engine. It includes blog, image gallery, WYSIWYG content editor, aggregator , guestbook and it provides an API for contributed modules. XHP CMS runs on both PHP 4 and PHP 5, has great support for templates and internationalization and is open source software, licensed under the GNU GPL.

Target IT [ http://www.targetit.ro ] is a private company committed to the Open Source Software principles, the main sponsor of the XHP CMS.

Press Contact: Dipl. Eng. Laurentiu Matei
laurentiu.matei@targetit.ro

XHP CMS 0.5.1 released

XHP CMS News — 2006-03-23T22:05:58+02:00

Bucharest, Romania - March 24, 2006

Target IT today announced the immediate availability of the latest version of its open source content management software, XHP CMS v0.5.1.

Version 0.5.1 has been launched on March 24th 2006 in response to a critical vulnerability.

Also included in this release are two patches previously published for v0.5 that solve a blog page generation issue and an installation issue connected to MySQL.

To update from a previous version (4.0 and up) just copy the new files over the old ones (except dbconfig.php and install.php).

Please visit http://xhp.targetit.ro/ to see XHP in action, download the core, modules, templates, documentation, language packages and join the growing XHP community.

Target IT [ http://www.targetit.ro ] is a private company committed to the Open Source Software principles, the main sponsor of the XHP CMS.

Press Contact: Dipl. Eng. Laurentiu Matei
laurentiu.matei@targetit.ro

XHP exploit in the wild

XHP CMS News — 2006-03-23T10:00:08+02:00

Bad news... it seems we have some attention.

I have reports of an XHP exploit in the wild. I will detail below so you can protect yourselft.

The exploit is actually using a hole in the HTMLArea Filemanager plugin to write malicious files in the /filemanager directory. They first search Google for "Powered by XHP CMS" (consider removing that) to spot victims.

Then they attack HTMLArea (which is included in XHP > v0.4), upload malicious files to the disk and use them to execute whatever the apache user has the right to execute.

You can see that you were attacked if you find in your /filemanager folder files like suntzu*.php.

Quick fix:

1. Remove the directory inc/htmlarea

2. Remove all files in the /filemanager directory (if you think you can see what are the malicious files and what are the files uploaded by you can delete only bad files).

This will of course leave XHP crippled. We are working on a new release to fix this issue. We expect to have it ready this week-end.

XHP exploit in the wild

XHP CMS News — 2006-03-23T09:00:08+02:00

Bad news... it seems we have some attention.

I have reports of an XHP exploit in the wild. I will detail below so you can protect yourselft.

Then they attack HTMLArea (which is included in XHP > v0.4), upload malicious files to the disk and use them to execute whatever the apache user has the right to execute.

You can see that you were attacked if you find in your /filemanager folder files like suntzu*.php.

Quick fix:

1. Remove the directory inc/htmlarea

2. Remove all files in the /filemanager directory (if you think you can see what are the malicious files and what are the files uploaded by you can delete only bad files).

This will of course leave XHP crippled. We are working on a new release to fix this issue. We expect to have it ready this week-end.

Patch for the XHP CMS 0.5 blog module

XHP CMS News — 2006-01-30T09:39:55+02:00

A bug has been discovered in the blog module that makes some pages not display in certain browsers.

To correct this problem, download this patch, unarchive it and replace your modules/blog/blog.xhpm.php file with the one provided in this archive.

Click here to download the patch!

Patch for the XHP CMS 0.5 blog module

XHP CMS News — 2006-01-30T08:39:55+02:00

XHP CMS v0.5 released

XHP CMS News — 2005-12-11T13:45:03+02:00

XHP CMS - eXpandable Home Page is an easy to install, easy to use, easy to expand content management system (CMS) written in PHP and using MySQL as the database engine. It includes blog, image gallery, WYSIWYG content editor, aggregator , guestbook and it provides an API for contributed modules.

XHP CMS runs on both PHP 4 and PHP 5.

XHP CMS has great support for templates and internationalization.

XHP CMS is open source software, licensed under the GNU GPL.

It's development has been started in 2003 by Laurentiu "Lars" Matei in Bucharest, Romania. Although started as a personal home-page oriented CMS, XHP is today suitable for a much wider range of web applications, including complex enterprise portals.

Separate goodies for personal home pages can be found but putting them all together is a pain for regular users and time consuming for computer experts that only want to set-up a simple personal home page. Once this simple home page is up and working, you can start expanding it to transform it into a complex portal.

We are proud to announce that version 0.5 has been launched on December 11th 2005. This version brings gettext support, many bugfixes and improved documentation.

Please visit http://xhp.targetit.ro/ to see XHP in action, download the core, modules, templates, documentation, language packages and join the growing XHP community.

XHP CMS v0.5 released

XHP CMS News — 2005-12-11T12:45:03+02:00

XHP CMS demo site

XHP CMS News — 2005-11-12T11:30:57+02:00

After several requests from our users, we created a demo site where you can try XHP CMS before installing it on your server.

The demo site is located at xhp.targetit.ro/demo. You have access to the admin section and you can play with all options.

XHP CMS demo site

XHP CMS News — 2005-11-12T10:30:57+02:00

XHP CMS 0.4.1 released

XHP CMS News — 2005-11-12T10:21:53+02:00

XHP CMS - eXpandable Home Page is an easy to install, easy to use, easy to expand content management system (CMS) written in PHP and using MySQL as the database engine. It includes blog, image gallery, content, aggregator modules and an API for contributed modules.

Version 0.4.1 has been launched on November 12th 2005 and it addresses a minor bug in the blog module (adding comments).

This version is fully compatible with 0.4 and the update is done by just copying the new files over the old one (except install.php and dbconfig.php).

Please visit xhp.targetit.ro to see XHP in action, download the core, modules, templates and language packages and join the growing XHP community.

XHP CMS 0.4.1 released

XHP CMS News — 2005-11-12T09:21:53+02:00

XHP CMS - eXpandable Home Page is an easy to install, easy to use, easy to expand content management system (CMS) written in PHP and using MySQL as the database engine. It includes blog, image gallery, content, aggregator modules and an API for contributed modules.

Version 0.4.1 has been launched on November 12th 2005 and it addresses a minor bug in the blog module (adding comments).

This version is fully compatible with 0.4 and the update is done by just copying the new files over the old one (except install.php and dbconfig.php).

Please visit xhp.targetit.ro to see XHP in action, download the core, modules, templates and language packages and join the growing XHP community.

Eris template for XHP 0.4

XHP CMS News — 2005-11-09T19:52:49+02:00

The first template available for XHP 0.4 is Eris, the most popular template from XHP 0.3.

The design comes from Eris design, while the XHP template has been built by Laurenţiu "Lars" Matei.

This file is also used as a template example.

Eris template for XHP 0.4

XHP CMS News — 2005-11-09T18:52:49+02:00

Indonesian translation for XHP 0.4

XHP CMS News — 2005-11-08T13:29:59+02:00

The Indonesian language package for XHP 0.4 is now available in the Language Packages section.

This translation has been contributed by Iqbal ReZa Fazlurrahman.

Indonesian translation for XHP 0.4

XHP CMS News — 2005-11-08T12:29:59+02:00

The Indonesian language package for XHP 0.4 is now available in the Language Packages section.

This translation has been contributed by Iqbal ReZa Fazlurrahman.

Romanian translation

XHP CMS News — 2005-11-07T21:50:58+02:00

The Romanian translation is the first XHP 0.4 translation available. It has been contributed by Laurentiu "Lars" Matei.

The file is also used as a language package example.

Romanian translation

XHP CMS News — 2005-11-07T20:50:58+02:00

The Romanian translation is the first XHP 0.4 translation available. It has been contributed by Laurentiu "Lars" Matei.

The file is also used as a language package example.

XHP CMS 0.4 released

XHP CMS News — 2005-11-06T15:33:58+02:00

XHP CMS - eXpandable Home Page is an easy to install, easy to use, easy to expand content management system (CMS) written in PHP and using MySQL as the database engine. It includes blog, image gallery, content, aggregator modules and an API for contributed modules.

We are proud to announce that version 0.4 has been launched on November 6th 2005.

This version is a huge step forward, including new features, bug fixes and security enhancements.

New features include:

WYSIWYG editing
support for pages containing several modules
inline editing of pages
several module instances
upload several pictures at once in gallery
web installers for modules, templates and language packages
web installer
new blog module with comments support
each page can use a different template
better documentation

The improved modules, templating and localization support opens new perspectives for custom development.

Please visit xhp.targetit.ro to see XHP in action, download the core, modules, templates and language packages and join the growing XHP community.

XHP CMS 0.4 released

XHP CMS News — 2005-11-06T14:33:58+02:00

XHP CMS - eXpandable Home Page is an easy to install, easy to use, easy to expand content management system (CMS) written in PHP and using MySQL as the database engine. It includes blog, image gallery, content, aggregator modules and an API for contributed modules.

We are proud to announce that version 0.4 has been launched on November 6th 2005.

This version is a huge step forward, including new features, bug fixes and security enhancements.

New features include:

WYSIWYG editing
support for pages containing several modules
inline editing of pages
several module instances
upload several pictures at once in gallery
web installers for modules, templates and language packages
web installer
new blog module with comments support
each page can use a different template
better documentation