oss-security - Re: CVE request: joomla before 1.5.18

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <925662149.777811275402332468.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Tue, 1 Jun 2010 10:25:32 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: Hanno Böck <hanno@...eck.de>
Cc: Steven Christey <coley@...us.mitre.org>, oss-security@...ts.openwall.com
Subject: Re: CVE request: joomla before 1.5.18


----- "Hanno Böck" <hanno@...eck.de> wrote:

> http://developer.joomla.org/security/news/314-20100501-core-xss-
> vulnerabilities-in-back-
> end.html?utm_source=feedburner&utm_medium=email&utm_campaign=Feed%3A+JoomlaSecurityNews+%28Joomla!
> +Security+News%29
> 
> Description
> 
> Back-end user can inject javascript in various administrator screens.
> 
> Affected all versions below 1.5.18.
> 

Please use CVE-2010-1649.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.