oss-security - Re: CVE Request: MyBB XSS bugs

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1263555106.46238.1292978482898.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Tue, 21 Dec 2010 19:41:22 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: Steve Christey <coley@...us.mitre.org>
Subject: Re: CVE Request: MyBB XSS bugs



----- Original Message -----
> MyBB has some XSS bugs:
> 
> http://blog.mybb.com/2010/12/15/mybb-1-6-1-release-1-4-14-update/
> 

As best as I can tell, one ID should work for "multiple XSS flaws".
If someone knows a reason to split, we can do that in the future.

Please use CVE-2010-4522.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.