Forum OpenACS Q&A: Re: RFC: Security policy for OpenACS (Security hole in OpenACS 5.1!)

Collapse
3: Re: RFC: Security policy for OpenACS (Security hole in OpenACS 5.1!) (response to 1)
Posted by Tom Jackson on 05/28/04 07:03 PM

You can 'root' a server running a default OpenACS install in ten minutes using a permissive HTML setting? That is clearly news. If this is true, wow! Can we get more information on this?