oss-sec mailing list archives
CVE request: simple machines forum
From: Hanno Böck <hanno () hboeck de>
Date: Sun, 6 Jul 2008 18:31:40 +0200
http://www.simplemachines.org/community/index.php?P=c3696c2022b54fa50c5f341bf5710aa3&topic=236816.0 "This version addresses a few security issues and fixes some small bugs." These sound like security issues: * Sanitation of $topic wasn't always done right. * Fixed a vulnerability with the use of the html-tag - issue reported by Jessica Hope. Though they don't list which issues are security relevant. They also don't mention if CVE-2007-5943 is fixed. -- Hanno Böck Blog: http://www.hboeck.de/ GPG: 3DBD3B20 Jabber/Mail: hanno () hboeck de
Attachment:
signature.asc
Description: This is a digitally signed message part.
Current thread:
- CVE request: simple machines forum Hanno Böck (Jul 06)
- Re: CVE request: simple machines forum Steven M. Christey (Jul 08)