[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: HTTP Response Splitting and SQL injection in megabbs forum

Subject: Re: HTTP Response Splitting and SQL injection in megabbs forum
From: PD9 Software <info@xxxxxxxxxxx>
Date: Sun, 26 Sep 2004 13:50:50 -0500

pigrelax wrote:

URL: http://www.pd9soft.com Tested megabbs 2.1
1. HTTP Response Splitting
2. HTTP Response Splitting
3. More and more SQL injection:

All three issues have been addressed, and updates have been posted at http://www.pd9soft.com/. Thank you for bringing them to my attention.

However in the future, would it be too much to ask that I am contacted first? I am very eager to fix any security vulnerabilities, but sipping coffee on a lazy Sunday afternoon and seeing this broadcast to a public list is a little disconcerting.

Thanks,
Matt Summers
PD9 Software, Inc

Prev by Date: Re:[3] Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue
Next by Date: [Hat-Squad] Remote Buffer overflow Vulnerability in YahooPOPS
Previous by thread: IPv4 fragmentation --> The Rose Attack
Next by thread: [Hat-Squad] Remote Buffer overflow Vulnerability in YahooPOPS
Index(es):
- Date
- Thread