EXPLOIT - Vulnerability in Pivot 1.40.1 - 1.40.5

[hansfn]

As reported by Secunia Pivot 1.40.x has a directory traversal vulnerability (or local file inclusion vulnerability if you prefer). Translated to normal language:

An attacker can easily gain access to your username and password hashes.

This means that if your password isn't very good, it will be broken within hours (using for example Rainbow tables).

What should you do?
1) Apply patch/revision 1333. Just follow the "text changed" link and add the lines in the green box into the right location in the function load_template in the file modules/module_parser.php
2) Change your password

This patch will be part of Pivot 1.40.6 which will be released soon, but not soon enough - please apply the patch immediately.

Affected versions: 1.40.1 - 1.40.5

PS! This is no excuse for running older version because they have other well-known vulnerabilities.