Re: ATutor CVE-2017-1000002, CVE-2017-1000003, CVE-2017-1000004

[Matthew Daley <mattd () bugfuzz com>]

JFTR:

On 17 July 2017 at 00:01, Henri Salo <henri () nerv fi> wrote:
> Is this assigment somehow related to this oss-security post?
> http://www.openwall.com/lists/oss-security/2016/07/01/3

Yes.

CVE-2017-1000002 = issues #26 and #32
CVE-2017-1000003 = issues #29 to #31
CVE-2017-1000004 = issues #1 to #25, #27 and #28 (but issue #25 should
probably be in CVE-2017-1000003 as it's a missing auth check, not a
SQL injection)

HTH,

- Matthew