Problem: User is allowed to upload files to server (no pictures), may go beyond the permitted download folder, and if he has the administrator account, then interrogate the script.

Error in version: All Versions

The degree of danger: Medium (High if the administrator account are online)

Distribution version 8.5 has been updated.

Problem: Under certain conditions, your site can be attacked XSS. Attacker can steal cookies; browser if administrator use outdated browser. So he can access to authorized area.
View more about XSS : http://en.wikipedia.org/wiki/Cross-site_scripting

Affected version: 7.x - 8.5

The degree of danger: Low

Download the patch and copy to your own server patch: dle7_85_path.zip

This patch applies to all versions: 7.x - 8.5

Problem: Lack of filtering incoming data in the module reset your password.

Error in version: only 8.2, the versions below 8.2, as well as the current version 8.3 is not affected

The degree of danger: Very high

Distribution version 8.2 has been updated.