[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re[2]: Light Blog 4.1 XSS Vulnerability
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re[2]: Light Blog 4.1 XSS Vulnerability
- From: BlackHawk <hawkgotyou@xxxxxxxxx>
- Date: Tue, 3 Jul 2007 13:52:31 +0200
Hello prodigy,
i suggest to not download it at all..
look at main.php, no check for admin rights, you can post up every php
files you want.. ;)
Saturday, June 30, 2007, 8:39:49 PM, you wrote:
> The information on this website is incorrect. Do not download this
> version as it is not fixed. For a fixed version, download version 6+
> from http://www.publicwarehouse.co.uk/php_scripts/lightblog.php
> There also was never a file called Light.php, There isn't a file
> called LightBlog.zip. I suggest asking for information before guessing.
--
Best regards,
BlackHawk mailto:hawkgotyou@xxxxxxxxx