Full Disclosure mailing list archives

Re: Pligg 0.9/1.x remote code execution

From: Henri Salo <henri () nerv fi>
Date: Sat, 28 Jul 2012 15:05:27 +0300

On Sat, Jul 21, 2012 at 06:34:46PM +0200, BlackHawk wrote:

Exploit attached, info inside. 2.0 versions could still be affected

http://pastebin.com/MSXFSvzA


Do you know if these issues have been fixed in some version of Pligg and if these have CVE-identifiers? I tried to ask 
this from forum.pligg.com, but my post was removed.

- Henri Salo

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

Pligg 0.9/1.x remote code execution BlackHawk (Jul 21)
- Re: Pligg 0.9/1.x remote code execution Henri Salo (Jul 28)
  - Re: Pligg 0.9/1.x remote code execution BlackHawk (Jul 28)