Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Re: Horde Webmail file inclusion proof of concept & patch.
Mar 21 2008 02:55PM
David Morton (mortonda dgrmm net)
-----BEGIN PGP SIGNED MESSAGE-----
On Mar 8, 2008, at 1:22 PM, Ben Klang wrote:
> The Horde team has investigated this report and found it to be
> reproducible, though not exactly as reported. The SQL example in
> the original post does prevent the themes from appearing but does
[ more ]
Copyright 2010, SecurityFocus