Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list] 
Date: Thu, 15 Mar 2012 15:18:49 -0400
From: Mark Stanislav <mark.stanislav@...il.com>
To: oss-security@...ts.openwall.com
Subject: CVE Requests

Howdy,

I was looking to receive CVEs for the following...

1) phpMoneyBooks (http://phpmoneybooks.com/) has an unauthenticated local
file inclusion (LFI) vulnerability
* Notified, Response Received, and Patch Released

2) phpGradeBook (http://phpgradebook.com/) has unauthenticated SQL Database
Exportation
* Notified, Response Received, and Patch Released

3) phpPaleo (http://sourceforge.net/projects/phppaleo/) has an
unauthenticated local file inclusion (LFI) vulnerability
* Notified, Response Received, and Patch Released

4) hbportal (http://sourceforge.net/projects/hbportal/) has a POST-based
SQL injection vulnerability
* Notified

5) e-ticketing (http://sourceforge.net/projects/e-ticketing/) has a
POST-based SQL injection vulnerability
* Notified & Response Received

Thanks!

-Mark

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ