Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list] 
Message-Id: <20130901223530.DE7216015D@smtp.hushmail.com>
Date: Mon, 02 Sep 2013 00:35:30 +0200
From: "Adéla Goldová" <roguecoder@...h.com>
To: oss-security@...ts.openwall.com
Subject: [CVE Request] IndiaNIC Testimonial 2.2 WP plugin

Hey

The testimonial plugin by IndiaNIC contains CSRF, XSS and SQLi vulnerabilities.
I was able to deface the website, extract user credentials etc through crafted forms.
Can someone please assign CVE's to this?

1: http://seclists.org/fulldisclosure/2013/Sep/5

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.