bugtraq - Re: ResourceSpace Multiple Cross Site Scripting, and HTML and SQL Injection Vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <201501091412.t09EC3Nc028460@sf01web1.securityfocus.com>
Date: Fri, 9 Jan 2015 14:12:03 GMT
From: dan@...tala.com
To: bugtraq@...urityfocus.com
Subject: Re: ResourceSpace Multiple Cross Site Scripting, and HTML and SQL
 Injection Vulnerabilities

Hi,

I'm from Montala - we head up ResourceSpace development.

Just to add an update - we believe all issues have been fixed in the ResourceSpace Subversion repository. In fact the majority were fixed some time ago however the original submitter was checking against an older version.

We aim to release by the end of January, this will contain all fixes.

Regards,

Dan

-- 
Dan Huby
Montala Limited

http://www.montala.com/
UK: 01367 710245
Intl: +44 136 771 0245