Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Wed, 20 Aug 2008 12:04:28 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security@...ts.openwall.com
cc: "Steven M. Christey" <coley@...re.org>
Subject: Re: CVE request: drupal 5.10/6.4


On Fri, 15 Aug 2008, Hanno [utf-8] Böck wrote:

> http://drupal.org/node/295053

Use the following, to be filled in later:

CVE-2008-3740 - first XSS

CVE-2008-3741 - second XSS.  This has a different root cause so is SPLIT.

CVE-2008-3742 - BlogAPI file uploads

CVE-2008-3743 - first CSRF, for 6.x only

CVE-2008-3744 - second CSRF, for 6.x/5.x (different affected versions so
                SPLIT)

CVE-2008-3745 - Upload module priv escalation


- Steve

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.