lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Tue, 5 Mar 2019 03:21:04 +0200
From: Henri Salo <henri@...v.fi>
To: Tim Coen <tc.coen@...il.com>
Cc: fulldisclosure@...lists.org
Subject: Re: [FD] Forminator 1.5.4 - Unauthenticated Persistent XSS,
 Blind SQL Injection (WordPress Plugin)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Tue, Feb 05, 2019 at 04:19:16PM +0100, Tim Coen wrote:
> https://security-consulting.icu/blog/2019/02/wordpress-forminator-persistent-xss-blind-sql-injection/

Please use CVE-2019-9567 for XSS vulnerability and CVE-2019-9568 for
SQL-injection vulnerability.

- -- 
Henri Salo
-----BEGIN PGP SIGNATURE-----
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=Xxee
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

Powered by blists - more mailing lists