DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.
Ticket URL: https://bugs.horde.org/ticket/14857
------------------------------------------------------------------------------
Ticket | 14857
Updated By | [email protected]
Summary | Multiple XSS security vulnerabilities
Queue | Horde Groupware
Version | 5.2.22
Type | Bug
State | Resolved
Priority | 3. High
Milestone |
Patch |
Owners | Michael Rubinsky
+New Attachment | horde-sqli-false-positives.zip
------------------------------------------------------------------------------
[email protected] (2018-09-30 21:27) wrote:
RE
I verified request-files for version .22 as well.
In my opinion those 2 SQLi bugs (for all 3 versions mentioned)
should be considered as false positives.
For version .22 I was able to 'inject' some data but it was garbage.
Below you'll find few screens.
My post on code610 will now be updated.
I will also ask MITRE to update information about this CVE.
Thkank you for your time.
Best regards,
Cody
> (...) files attached below again; comment to delete; thank you
[email protected] (2018-09-30 21:27) uploaded: horde-sqli-false-positives.zip
https://bugs.horde.org/h/services/download/?app=whups&actionID=download_file&file=horde-sqli-false-positives.zip&ticket=14857&fn=%2Fhorde-sqli-false-positives.zip
--
bugs mailing list
Frequently Asked Questions: http://wiki.horde.org/FAQ
To unsubscribe, mail: [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.