Full Disclosure mailing list archives
Re: Pligg 0.9/1.x remote code execution
From: Henri Salo <henri () nerv fi>
Date: Sat, 28 Jul 2012 15:05:27 +0300
On Sat, Jul 21, 2012 at 06:34:46PM +0200, BlackHawk wrote:
Exploit attached, info inside. 2.0 versions could still be affected http://pastebin.com/MSXFSvzA
Do you know if these issues have been fixed in some version of Pligg and if these have CVE-identifiers? I tried to ask this from forum.pligg.com, but my post was removed. - Henri Salo _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Pligg 0.9/1.x remote code execution BlackHawk (Jul 21)
- Re: Pligg 0.9/1.x remote code execution Henri Salo (Jul 28)
- Re: Pligg 0.9/1.x remote code execution BlackHawk (Jul 28)
- Re: Pligg 0.9/1.x remote code execution Henri Salo (Jul 28)