[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20140623142352.6d583fbb@hboeck.de>
Date: Mon, 23 Jun 2014 14:23:52 +0200
From: Hanno Böck <hanno@...eck.de>
To: oss-sec <oss-security@...ts.openwall.com>
Cc: cve-assign@...re.org
Subject: CVE request: piwigo before 2.6.3 sql injection
The Piwigo image gallery contains an sql injection before versions
2.6.3 and 2.7.0_beta2
Upstream bug:
http://piwigo.org/bugs/view.php?id=3089
commit:
http://piwigo.org/dev/changeset/28678
release notes:
http://piwigo.org/forum/viewtopic.php?id=24009
Please assign a CVE.
--
Hanno Böck
http://hboeck.de/
mail/jabber: hanno@...eck.de
GPG: BBB51E42
Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
