Full Disclosure mailing list archives

Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities


From: Christian Sciberras <uuf6429 () gmail com>
Date: Tue, 28 Jun 2011 19:37:24 +0200

Rather than that, I'd say the dev team is out of sync with the security
team..




On Tue, Jun 28, 2011 at 5:59 PM, Jacqui Caren-home <
jacqui.caren () ntlworld com> wrote:

On 28/06/2011 07:25, YGN Ethical Hacker Group wrote:
Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS)
Vulnerabilities

FYI 1.5.21 seems to be AOK.

IMHO The Joomla team do not seem to grok the concept of regression testing
and keep
re-introducing the same XSS problems over and over :-)

Jacqui

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: