[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-Id: <200807061831.41014.hanno@hboeck.de>
Date: Sun, 6 Jul 2008 18:31:40 +0200
From: Hanno Böck <hanno@...eck.de>
To: oss-security@...ts.openwall.com
Cc: coley@...re.org
Subject: CVE request: simple machines forum
http://www.simplemachines.org/community/index.php?P=c3696c2022b54fa50c5f341bf5710aa3&topic=236816.0
"This version addresses a few security issues and fixes some small bugs."
These sound like security issues:
* Sanitation of $topic wasn't always done right.
* Fixed a vulnerability with the use of the html-tag - issue reported by
Jessica Hope.
Though they don't list which issues are security relevant.
They also don't mention if CVE-2007-5943 is fixed.
--
Hanno Böck Blog: http://www.hboeck.de/
GPG: 3DBD3B20 Jabber/Mail: hanno@...eck.de
Download attachment "signature.asc " of type "application/pgp-signature" (198 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
