lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Message-ID: <4E0ADFCD.6050004@ntlworld.com> Date: Wed, 29 Jun 2011 09:18:21 +0100 From: Jacqui Caren-home <jacqui.caren@...world.com> To: full-disclosure@...ts.grok.org.uk Subject: Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities On 29/06/2011 02:40, Nick FitzGerald wrote: > The kind of problems that scream "Why would anyone in their right mind > use it?" The official line. http://forum.joomla.org/viewtopic.php?f=432&t=335090 and a good example of how CVE's are handled http://forum.joomla.org/viewtopic.php?f=432&t=631398 _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/