Date: Fri, 17 Sep 2010 14:23:37 -0400 (EDT) From: Josh Bressers <bressers@...hat.com> To: oss-security@...ts.openwall.com Cc: coley <coley@...re.org> Subject: Re: CVE request: pixelpost ----- "Raphael Geissert" <geissert@...ian.org> wrote: > > Multiple vulnerabilities have been reported against pixelpost: > > 1) A CSRF vulnerability allows changes to some settings (PoC allows > changing the administrator's password.)  Please use CVE-2010-3305 > 2) SQL injection  CVE-2009-4899 > 3) XSS  CVE-2009-4900 > > 2) and 3) are from 2009, so I guess we are going to need some help from > Steven for those ones. The only information about those is  which has > some other changes. > >  http://www.exploit-db.com/exploits/15014/ >  > http://www.pixelpost.org/blog/2009/09/02/pixelpost-173-security-update/ >  http://pastie.textmate.org/616485 > Thanks. -- JB
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.