full-disclosure - Re: [FD] Slider Revolution/Showbiz Pro shell upload exploit

Open Source and information security mailing list archives

Message-ID: <5476E813.3010105@netshock.pl>
Date: Thu, 27 Nov 2014 10:00:03 +0100
From: Lukasz Biegaj <l.biegaj@...shock.pl>
To: fulldisclosure@...lists.org
Subject: Re: [FD] Slider Revolution/Showbiz Pro shell upload exploit

W dniu 25.11.2014 o 17:37, Simo Ben youssef pisze:
> # decided to patch without releasing a full security advisory, leaving thousands of revslider users who didn't update their plugin to the
> # latest version (=> 3.0.96) vulnerable to this nasty flaw,
Keep in mind, that version 3.0.96 was released about a year ago, so if 
your wordpress is not that old, then you're unaffected.

-- 
Łukasz Biegaj
NetShock.pl sp.j. - Rozwiązania internetowe


_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives