oss-security - CVE request: Concrete5 XSS vulnerability

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20150102194358.GA31666@kludge.henri.nerv.fi>
Date: Fri, 2 Jan 2015 21:43:58 +0200
From: Henri Salo <henri@...v.fi>
To: oss-security@...ts.openwall.com
Cc: cve-assign@...re.org, abuse@...crete5.org, security@...crete5.org,
	Simo Ben youssef <simo@...xploit.com>
Subject: CVE request: Concrete5 XSS vulnerability

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Can you assign CVE identifier for following vulnerability in Concrete5, thanks.

http://seclists.org/bugtraq/2014/Dec/53
http://osvdb.org/115633
http://osvdb.org/115634

ps. there is something wrong with http://www.openwall.com/lists/oss-security/ it
says "an error occurred while processing this directive"

- -- 
Henri Salo
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlSm9P4ACgkQXf6hBi6kbk+bfQCgjF/EWeO4Wfs0SUSsq96LwNpE
AWAAn1yKEw9eDAlJ6cQczjzHZ7VGdXUp
=0mVH
-----END PGP SIGNATURE-----

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.