| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Tue, 5 Mar 2019 03:21:04 +0200 From: Henri Salo <henri@...v.fi> To: Tim Coen <tc.coen@...il.com> Cc: fulldisclosure@...lists.org Subject: Re: [FD] Forminator 1.5.4 - Unauthenticated Persistent XSS, Blind SQL Injection (WordPress Plugin) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Tue, Feb 05, 2019 at 04:19:16PM +0100, Tim Coen wrote: > https://security-consulting.icu/blog/2019/02/wordpress-forminator-persistent-xss-blind-sql-injection/ Please use CVE-2019-9567 for XSS vulnerability and CVE-2019-9568 for SQL-injection vulnerability. - -- Henri Salo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE/aVSDznAZReWTkxKJ633pE6qdXQFAlx9zwAACgkQJ633pE6q dXScdQ/+NVNYUW7vnrffGyXzEN1sL/A+R+VUGbAoLTSE/Dex6U0eur+0QviumgwY r77Z4BANUCzO6YXckNRVkQiQB4fD/P5IKwQlrsepaEija2ez6fizCLMHJxlevGMa cWex/Lv0iGZkggt0q+gdmRDV4fy/ZyjgEndQxFIqGdIYHHcPGdBdFnQw2aJDLomD bVm0+z/NmX8xigHvdBjEC7CKGcYyrZl+vCMXhMkraeurZI5WvrLgmpG4XhGAnLdX nlo3bLjNBmfJJXZbJ3MO64VMkJFZ7UYHaTZNsPjreyocCamZMfh7VWp7OTneLWsj 8JrGbcWyYJp9vVJkWfTzJMA2umXIxdW7qpdw4fABVSxHjX3W6fn8aqNVxnugWU2F GD0ocufE0RjQ9Y7DWnZG5ZkTnSMwmNt6b+rHr6r9qciO12WeAEyabYzdOaLI1WYc sa/At6NWvr4NuMBpqNjU0xb0QMhquFSvt7Ba51oC/vL0+vrUvpF8Mvg21VkoeaIl 9AWDQyuvLPNKYRbI0mz7KkXHWYk2rNhkjclWyCGKIyLYI4DwkMJlzVVcSAJzAqBG XpXPWpnD0+qj3pM7AIx+j2SgXd2+kfq75P59wOf8vR+MfW2krK+nLLTglLnRD+9t UKJNKxtSvgDn3evzwu5OdZklkCdsG9YM2m8D2l6RTzHaIiVcaOs= =Xxee -----END PGP SIGNATURE----- _______________________________________________ Sent through the Full Disclosure mailing list https://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Powered by blists - more mailing lists