[VIM] Question on OS4E vulnerability (fwd)

[Steven M. Christey]

OS4E appears to be a vendor, not a product.  Clarification requested from
the researcher...

- Steve


---------- Forwarded message ----------
Date: Tue, 31 May 2005 23:53:55 -0400 (EDT)
From: Steven M. Christey <coley at mitre.org>
To: udnst at yahoo.com
Subject: Question on OS4E vulnerability


Hello,

I am the editor of the CVE List.

Your recent vulnerability report on SQL injection in OS4E did not give
a specific product name.

OS4E is the name of the vendor.  Their web site shows three products:

  - 30-Minute Websites for Teachers
  - Pupil Pages
  - Sites-4-Schools

which product has the SQL injection vulnerability?  Or is there a
different product that has the problem?


Thank you,
Steve