oss-security - CVE request: Multiple SQL injection vulnerabilities in GigPress

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAEhYM0Yo=OQHMGXGwxn7z+-c18rdXcOd8+O134M03CMswGSOyQ@mail.gmail.com>
Date: Wed, 20 May 2015 17:51:04 +0200
From: Adrián M. F. <adrimf85@...il.com>
To: oss-security@...ts.openwall.com
Cc: cve-assign@...re.org
Subject: CVE request: Multiple SQL injection vulnerabilities in GigPress -
 WordPress plugins.

Hi!

I discovered multiple SQLi in a WordPress plugin:

* Multiple SQL injection vulnerabilities in GigPress.
* vulnerable version: 2.3.8
* patched version: 2.3.9
* vendor: https://wordpress.org/plugins/gigpress/
* changelog: https://wordpress.org/plugins/gigpress/changelog/

I request a CVE for the same.

Thanks!

A.

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.