lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
From: info at pd9soft.com (PD9 Software)
Subject: Re: HTTP Response Splitting and SQL injection in megabbs forum

pigrelax wrote:

>URL: http://www.pd9soft.com 
>Tested megabbs 2.1 
>
>1. HTTP Response Splitting
>2. HTTP Response Splitting
>3. More and more SQL injection:
>

All three issues have been addressed, and updates have been posted at 
http://www.pd9soft.com/. Thank you for bringing them to my attention.

However in the future, would it be too much to ask that I am contacted 
first?  I am very eager to fix any security vulnerabilities, but sipping 
coffee on a lazy Sunday afternoon and seeing this broadcast to a public 
list is a little disconcerting.

Thanks,
Matt Summers
PD9 Software, Inc



Powered by blists - more mailing lists