bugtraq - Re[2]: Light Blog 4.1 XSS Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 3 Jul 2007 13:52:31 +0200
From: BlackHawk <hawkgotyou@...il.com>
To: bugtraq@...urityfocus.com
Subject: Re[2]: Light Blog 4.1 XSS Vulnerability

Hello prodigy,

i suggest to not download it at all..
look at main.php, no check for admin rights, you can post up every php
files you want.. ;)


Saturday, June 30, 2007, 8:39:49 PM, you wrote:

> The information on this website is incorrect. Do not download this
> version as it is not fixed. For a fixed version, download version 6+
> from http://www.publicwarehouse.co.uk/php_scripts/lightblog.php

> There also was never a file called Light.php, There isn't a file
> called LightBlog.zip. I suggest asking for information before guessing.

-- 
Best regards,
 BlackHawk                            mailto:hawkgotyou@...il.com