oss-security - CVE id request: moodle XSS and CSRF

Message-Id: <200807250917.50664.ludwig.nussel@suse.de>
Date: Fri, 25 Jul 2008 09:17:50 +0200
From: Ludwig Nussel <ludwig.nussel@...e.de>
To: oss-security@...ts.openwall.com
Cc: cve@...re.org
Subject: CVE id request: moodle XSS and CSRF

Hi,

The moodle project has fixed a CSRF issue
http://moodle.org/mod/forum/discuss.php?d=101405
and an XSS problem
http://moodle.org/mod/forum/discuss.php?d=101401

cu
Ludwig

-- 
 (o_   Ludwig Nussel
 //\   
 V_/_  http://www.suse.de/
SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.