ZenTao Open Source 12.4.2 is released. This release is to fix bugs and loopholes.

Changelog

Bugs

3384 SQL injection vulnerability exists in ZenTao 12.4
3383 Regarding ZenTao 12.4, there is an arbitrary file reading vulnerability
3374 linux one-click installation package mysql security vulnerability
3314 pro8.8.2 vulnerability
3291 SQL injection problem
3270 ZenTao open source version has a command execution vulnerability in the background
3268 There is a website file deletion vulnerability in the ZenTao background database backup.
3116 ZenTao's access to checktable.php exposes the absolute path
3051 Permission logic design vulnerability
3035 Handle security scan vulnerabilities sent by customers
3014 Report on the existence of remote code execution vulnerabilities in ZenTao
3013 SQL injection vulnerability exists in ZenTao plug-in installation
3012 Vulnerabilities in ZenTao access bypass
3000 There are high-risk vulnerabilities in the Apache version of ZenTao linux one click installation package
2895 Some other vulnerabilities needed to be fixed

Download

Source Code Package

       Official Website

One-Click Installation Package for Windows

• Windows 64 bit one-click installation

       Official Website

• Windows 32 bit one-click installation

       Official Website

• Windows one-click installation (No security Settings)

       Official Website

One-Click Installation  Packages for Linux (unzip to /opt )

• Linux 64 bit one-click installation (Ubuntu17+ and Centos7.4+)

       Official Website

• Linux 32 bit one-click installation  ( Ubuntu17+ and Centos7.4+ )

       Official Website

• Linux 64 bit one-click installation   ( Ubuntu16- and Centos7.3- )

       Official Website

• Linux 32 bit one-click installation  ( Ubuntu16- and Centos7.3- )

       Official Website

PHP package

• DEB package:      Official Website

• RPM package:     Official Website

Help

  Installation Manual

  Update Manual

---

If you have any questions, contact troy @easycorp.ltd for help.