Date: Tue, 24 May 2011 21:55:13 -0300 From: Javier Bassi <javierbassi@...il.com> To: oss-security@...ts.openwall.com Subject: CVE Request: Post Revolution multiple security vulnerabilities Hi, I need a CVE for Post Revolution 0.8c multiple security vulnerabilities. (Post Revolution is a CMS similar to Wordpress released under GPLv2) The vulnerabilities are: 1. A Denial of service vulnerability. 2. Cross-site scripting vulnerabilities. 3. Cross-site request forgery vulnerabilities. Vendor has publicly confirmed the existence of the vulnerabilities: http://translate.google.com/translate?u=http%3A%2F%2Fpostrev.com.ar%2F&sl=es&tl=en&hl=&ie=UTF-8 I will wait for vendor to fully patch these issues before full-disclosure (probably by Friday)
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.