full-disclosure - Re: [FD] Remote file upload vulnerability in mailcwp v1.99 wordpress plugin

Open Source and information security mailing list archives

Message-id: <10266013-1C67-4091-ADA5-45E607A52A79@me.com>
Date: Thu, 16 Jul 2015 20:22:45 -0400
From: "Larry W. Cashdollar" <larry0@...com>
To: Open Source Security <oss-security@...ts.openwall.com>
Subject: Re: [FD] Remote file upload vulnerability in mailcwp v1.99
	wordpress plugin

> On Jul 16, 2015, at 8:18 PM, Larry W. Cashdollar <larry0@...com> wrote:
> 
> Title: Remote file upload vulnerability in mailcwp v1.99 wordpress plugin
> Author: Larry W. Cashdollar, @_larry0
> Date: 2015-07-09
> Download Site: https://wordpress.org/plugins/mailcwp/
> Vendor: CadreWorks Pty Ltd
> Vendor Notified: 2015-07-09 fixed in v1.110

Typo should be v1.100.

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives