Full Disclosure mailing list archives
Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities
From: Jacqui Caren-home <jacqui.caren () ntlworld com>
Date: Wed, 29 Jun 2011 09:13:43 +0100
On 29/06/2011 02:40, Nick FitzGerald wrote:
Christian Sciberras wrote:Rather than that, I'd say the dev team is out of sync with the security team..Assuming that that may be a reasonable one-sentence encapsulation of how Joomla development is organized... The fact such a sentence can be meaningfully utterred tells us there are major problems _inherent_ in Joomla.
What I find worrying is that I cannot see the test suite anywhere. Have I misse dthe link, is it secret or non existent? Jacqui http://forum.joomla.org/viewtopic.php?f=681&t=624023&sid=e07f7a089ae6ca49291960fb1744de51 I would have thought they would be asking for help to migrate test into one of the free-to-use CI systems available to floss projects. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities YGN Ethical Hacker Group (Jun 27)
- Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities Christian Sciberras (Jun 27)
- Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities Jacqui Caren-home (Jun 28)
- Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities Christian Sciberras (Jun 28)
- Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities Nick FitzGerald (Jun 28)
- Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities Jacqui Caren-home (Jun 29)
- Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities Jacqui Caren-home (Jun 29)
- Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities Christian Sciberras (Jun 28)