Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 29 Mar 2012 08:38:28 +0200
From: Hanno Böck <>
To: Kurt Seifried <>
Subject: Re: CVE request: egroupware before 1.8.002 various
 security issues

Am Wed, 28 Mar 2012 23:04:07 -0600
schrieb Kurt Seifried <>:

> On 03/28/2012 10:26 AM, Hanno Böck wrote:
> >
> > 
> > " 1. Fixes regarding security issues like 'local file inclusion', 
> > 'sql injection', 'reflected xss' and 'open redirect'. "
> > 
> Make a list with specific requests and information please.

Local file inclusion:

SQL injection in 1.8.001:

reflected xss:

open redirect:

Hanno Böck		mail/jabber:

Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.