Textpattern CMS

#1 2007-05-20 22:57:03

Zarathu

Member

Registered: 2006-08-12

Posts: 35

Ha! Remote Path Disclosure

[edit: redacted]

Lovely, eh? Give me credit for that one along with the XSS I found earlier. That’s right.

Last edited by zem (2007-05-20 23:25:02)

#2 2007-05-20 23:26:35

zem

Developer Emeritus

From: Melbourne, Australia

Registered: 2004-04-08

Posts: 2,579

Re: Ha! Remote Path Disclosure

I thought we explained our security procedures last time. Please don’t post sensitive information on the forum.

We’ll give you credit for this and the earlier issue in the next release.

---

Alex

#3 2007-05-21 00:59:59

zem

Developer Emeritus

From: Melbourne, Australia

Registered: 2004-04-08

Posts: 2,579

Re: Ha! Remote Path Disclosure

Fixed in svn.

---

Alex

#4 2007-05-22 01:24:01

Mary

Sock Enthusiast

Registered: 2004-06-27

Posts: 6,236

Re: Ha! Remote Path Disclosure

FAQ: Reporting Security Issues