Bugtraq mailing list archives

Re: [Full-disclosure] XSS and SQL Injection Vulnerabilities in MiniBB

From: Henri Salo <henri () nerv fi>
Date: Thu, 11 Jul 2013 17:32:15 +0300

On Thu, Jul 11, 2013 at 03:36:00PM +0300, Netsparker Advisories wrote:

Solution
--------------------
-

Advisory Timeline
--------------------
26/02/2013 - First contact
15/03/2013 - Fix & New MiniBB version released
11/07/2013 - Advisory released


Why solution is empty even vendor released new version? To me upgrading to 3.0.1
looks like a solution without looking at the code.

---
Henri Salo

Attachment: signature.asc
Description: Digital signature

Current thread:

Re: [Full-disclosure] XSS and SQL Injection Vulnerabilities in MiniBB Henri Salo (Jul 11)