 SQL injection vulnerability in Lastest version Sefrengo V1.6.4, SQL injection vulnerability in Lastest version Sefrengo V1.6.4 |
Willkommen, Gast ( Anmelden | Registrierung ) [ Hilfe | Mitglieder | Suche ]
  |
| SQL injection vulnerability in Lastest version Sefrengo V1.6.4, SQL injection vulnerability in Lastest version Sefrengo V1.6.4 |
 Wed. 24. June 2015, 04:53
Beitrag
#1
|
|
|
Newbie  Gruppe: Members Beiträge: 2 Mitglied seit: 24.06.2015 Mitglieds-Nr.: 2.737  |
Dear developer team.
We are a information security team from QIHU 360 company, China. We found a SQL injection vulnerability in lastest version Sefrengo V1.6.4 and already sent you the technical details to info@sefrengo.org ,If you can't get the information, please provide me another email address. Thank you [Team info] name: 0keeTeam company: QIHU 360 company, China email: g-sec-web@360.cn |
 |
 
|
|
Wed. 24. June 2015, 07:50
Beitrag
#2
|
|
|
Advanced Member Gruppe: Admins Beiträge: 507 Mitglied seit: 27.06.2006 Mitglieds-Nr.: 11 |
Hello 0keeTeam,
thanks for testing Sefrengo and the security report. I recieved it and will publish a fix soon. |
|
|
|
|
Wed. 24. June 2015, 11:36
Beitrag
#3
|
|
|
Newbie Gruppe: Members Beiträge: 2 Mitglied seit: 24.06.2015 Mitglieds-Nr.: 2.737 |
This issue assigned by CVEID: CVE-2015-5052
|
|
|
|
|
Thu. 25. June 2015, 22:14
Beitrag
#4
|
|
|
Advanced Member Gruppe: Admins Beiträge: 507 Mitglied seit: 27.06.2006 Mitglieds-Nr.: 11 |
Security fix is included in Sefrengo v1.6.5 beta2.
|
|
|
|
|
|
Vereinfachte Darstellung | Aktuelles Datum: 18.1.25 - 22:03 |
