[VIM] Joomla Component YaNC (listid) SQL Injection Vulnerability

str0ke str0ke at milw0rm.com
Thu Jun 26 21:29:05 UTC 2008


Thanks George,

5943 has been removed from the frontend.

/str0ke

George A. Theall wrote:
> Milw0rm 5943 seems to be a dup of milw0rm 3944 / CVE-2007-2792. Both
> involve a SQL injection issue in the 'listid' parameter.
>
> Btw, just so it's clear, I don't intend these sorts of posts to be
> critical of str0ke but to raise awareness among all vdb maintainers.
> If you'd rather I keep the messages private, let me know.
>
> George


More information about the VIM mailing list