oss-sec mailing list archives

Re: CVE request: letodms multiple issues


From: Raphael Geissert <geissert () debian org>
Date: Tue, 28 Aug 2012 00:12:42 -0500

On Monday 27 August 2012 20:32:16 Kurt Seifried wrote:
On 08/27/2012 02:43 PM, Raphael Geissert wrote:
Multiple vulnerabilities have been found in LetoDMS[1]. Could CVE
ids be assigned, please? Thanks in advance.
[...]
 major security update which fixeѕ lots of possible XSS and CSRF

attacts

That's two sets of vulns, can you send me the links to the code
updates? I'm assuming they are in
http://mydms.svn.sourceforge.net/viewvc/mydms/ somewhere? Thanks.

Not helpful, it's all in:
http://mydms.svn.sourceforge.net/viewvc/mydms?view=revision&revision=853

Cheers,
-- 
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net


Current thread: