[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <CACd+vpfmKJmbdU5VywzvqfRtTApKbP2GVg6RTJVQuVHxJOWKLA@mail.gmail.com>
Date: Wed, 29 Jan 2014 20:40:43 +0530
From: Puneeth Gowda <puneethis021@...il.com>
To: oss-security@...ts.openwall.com
Subject: CVE: Request
Kindly issue the CVE-ID.
I have reported cross site scripting(xss) in Nokia Maps & Places(v:1.6.6)
wordpress plugin.
Link: http://wordpress.org/plugins/nokia-mapsplaces/
Disclosed to plugins@...dpress.org : 18/01/2014
Contacted author via twitter : No response
vulnerable link from wordpress svn :
http://plugins.svn.wordpress.org/nokia-mapsplaces/tags/1.6.6/page/place.html
Issue Fixed on : 20/01/2014
Reference for change log :
https://plugins.trac.wordpress.org/log/nokia-mapsplaces/
Regards
Puneeth Gowda
CEH | OSCP
puneethis021@...il.com
---------- Forwarded message ----------
From: Puneeth Gowda <puneethis021@...il.com>
Date: Sat, Jan 18, 2014 at 5:15 PM
Subject: Vulnerability in Nokia Maps & Places (Version:1.6.6)
To: plugins@...dpress.org
Hi,
I would like to report cross site scripting(xss) in Nokia Maps &
Places(v:1.6.6) wordpress plugin.
Please find the attached document for POC.
Kindly let me know if you face any issues while reproducing POC.
Thanks
Puneeth Gowda
Content of type "text/html" skipped
Download attachment "XSS in Nokia Maps & Places plugin v 1.6.6.pdf" of type "application/pdf" (54456 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
