bugtraq - Re: WoltLab(R) Community Framework WCF 1.0.6

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20080412081543.6827.qmail@securityfocus.com>
Date: 12 Apr 2008 08:15:43 -0000
From: marc.deroche@...s.ch
To: bugtraq@...urityfocus.com
Subject: Re: WoltLab(R) Community Framework  WCF 1.0.6

This behaviour refers to version 1.0.3 
It was changed and fixed two months ago.

Is there still known potential XSS issue in the current version 1.0.6.?

WoltLab offers different ways to contact with relation to a security vulnerability:
Mail to woltlab (at) woltlab de.
WoltLab Community Forum: http://community.woltlab.com/
Woltlab Burning Board Forum:
http://www.woltlab.de/forum/
Contact form at www.woltlab.de:
http://www.woltlab.de/contact/mailer.php

These contacts are public and well known
by WCF users.