[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oss-security
Subject:    [oss-security] CVE request: silverstripe - two sql injections
From:       Hanno =?utf-8?q?B=C3=B6ck?= <hanno () hboeck ! de>
Date:       2009-04-13 9:20:13
Message-ID: 200904131120.13789.hanno () hboeck ! de
[Download RAW message or body]


Versions below 2.2.2-rc2:
http://silverstripe.org/archive/show/43794
"AjaxUniqueTextField: fixed sql-injection "

More current:
http://open.silverstripe.com/ticket/3721
(maybe fixed in 2.3.1, but they don't tend to publish proper release notes)

-- 
Hanno Böck		Blog:		http://www.hboeck.de/
GPG: 3DBD3B20		Jabber/Mail:	hanno@hboeck.de

["signature.asc" (application/pgp-signature)]

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic