bugtraq - Re: Bosdev Multiple vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20071113000858.28499.qmail@securityfocus.com>
Date: 13 Nov 2007 00:08:58 -0000
From: sales@...dev.com
To: bugtraq@...urityfocus.com
Subject: Re: Bosdev Multiple vulnerabilities

Actually, you've never emailed us.

HTML is stripped from posts, with the exception of admin allowed tags.  The username XSS issue is already being dealt with in the 6.1 release.

Install.php won't do anything, unless you know the username/password/db name for the system.  Admins are told to remove the file specifically for the reason listed above.

Next time you say you have emailed someone, you might actually try doing it.