oss-sec mailing list archives
Re: CVE request: piwigo before 2.6.3 sql injection
From: cve-assign () mitre org
Date: Wed, 25 Jun 2014 20:20:21 -0400 (EDT)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The unspecified vulnerability "[security] security failure reported and fixed by Christopher Chrapka, ojezu.org" in http://piwigo.org/releases/2.6.3 is assigned CVE-2014-4648. The SQL injection that was apparently first identified in 2.6.2 and (thus far) only fixed in 2.7.0beta2 (see the http://piwigo.org/bugs/view.php?id=3089 page) is assigned CVE-2014-4649. - -- CVE assignment team, MITRE CVE Numbering Authority M/S M300 202 Burlington Road, Bedford, MA 01730 USA [ PGP key available through http://cve.mitre.org/cve/request_id.html ] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (SunOS) iQEcBAEBAgAGBQJTq2aPAAoJEKllVAevmvmsMwAH/Rejl52Ahj5KKrCr5oAkpWaR QJtsBTFQbFGBg36aV9NnG13GLcrfHWVoLORwSr6M6W9UvslQQAA09fHfWlzj8hH9 9Ed19JIF9PFJhfb3NVs2BwpcC2Jq5tuPEBHKZ/zP+DSP4SgKo7v8UUpkNGCAa4A4 fL4jdfn8o4AW6laH2tZt7PlXxFsf2SW+PF4QqUT0aYbQrMqWrS7g+eNZQQB4LjwR SsRPo8pPGW+5fGOxjwU1e5TcekbnPGOymhzHdHx/3vIzWiIlh5pQ5bvG/OXPTed/ CWwQ66VxYKGXQ0Uw43QT6USZY2/oyW1nGcjTq2H8oudg/KW+QJG/f1htOrawXr8= =+pZa -----END PGP SIGNATURE-----
Current thread:
- CVE request: piwigo before 2.6.3 sql injection Hanno Böck (Jun 23)
- Re: CVE request: piwigo before 2.6.3 sql injection cve-assign (Jun 23)
- Re: CVE request: piwigo before 2.6.3 sql injection Hanno Böck (Jun 24)
- Re: CVE request: piwigo before 2.6.3 sql injection cve-assign (Jun 24)
- Re: CVE request: piwigo before 2.6.3 sql injection cve-assign (Jun 25)
- Re: CVE request: piwigo before 2.6.3 sql injection Hanno Böck (Jun 24)
- Re: CVE request: piwigo before 2.6.3 sql injection cve-assign (Jun 23)