Megachan.net Imageboards

Recently, 2 exploits were announced for Kusaba - they allowed someone to remotely upload files and then execute them. This was done by exploiting two vulnerabilities found in vulnerability in paint_save.php and load_receiver.php

In any case, the forks have all stated that they have fixed the bugs in their releases, after several *chan sites got hosed (MC wasn’t affected). However, Harrison (who’s doing the Kusaba X fork) has released a standalone patch here, if you still want to patch Kusaba without migrating to one of the forks.

Please note that I won’t provide support regarding the patch, you’ll need to talk to him regarding that.