Date: Fri, 11 Nov 2016 21:43:27 +0200 From: Henri Salo <henri@...v.fi> To: oss-security@...ts.openwall.com Cc: mehmet@...metince.net, mr@...buckingham.com Subject: CVE request: BigTree CMS SQL injection and reflected cross-site scripting vulnerabilities fixed in 4.2.12 / 4.1.16 Please assign CVE identifier for BigTree CMS SQL injection and reflected cross-site scripting vulnerabilities, thanks. Fixed in 4.2.12 / 4.1.16 Reported by Mehmet İnce in https://github.com/bigtreecms/BigTree-CMS/pull/256 Fixed in: https://github.com/bigtreecms/BigTree-CMS/commit/7e4b03f89dcf8dc3b0500347e877ddb7a766f23e https://github.com/bigtreecms/BigTree-CMS/commit/7260b84371c99e29576e8ee22eda7b36fc5da741 https://github.com/bigtreecms/BigTree-CMS/commit/50bfa22c5861657470803669a0283053d8b67338 -- Henri Salo
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.