Recent Vulnerabilities

JoelOssi

posted Feb 16 '20 at 6:27 pm

Discovered by: Polina Voronina
CVE-2020-7051 [Type: Stored Cross-Site Scripting, Product: Codelogic Codoforum, Version: 4.8.4]
CVE-2020-7050 [Type: DOM-Based Cross-Site Scripting, Product:
Codelogic Codoforum, Version: 4.8.4]

Discovered by: **Polina Voronina** CVE-2020-7051 [Type: Stored Cross-Site Scripting, Product: Codelogic Codoforum, Version: 4.8.4] CVE-2020-7050 [Type: DOM-Based Cross-Site Scripting, Product: Codelogic Codoforum, Version: 4.8.4]

edited Feb 17 '20 at 12:50 pm

WebCrew

posted Feb 16 '20 at 9:23 pm

Thank You very much. smile

Please remember to mention @admin or @adesh with such important infos.

Kind regards, Andy

**Thank You very much**. :) Please remember to mention @admin or @adesh with such important infos. Kind regards, Andy

https://net-twin.de/ Community for creative people - JOIN it Now please
https://github.com/WebCrew My GitHub account
https://sell-co.de/ Lots of Web-Tools and Utilities for free

admin

posted Feb 17 '20 at 10:34 am

Hi @JoelOssi

The SQL injection reported for v4.8.8 doesn't seem to be valid. We have emailed you our investigation.

Thank you.

Hi @JoelOssi The SQL injection reported for v4.8.8 doesn't seem to be valid. We have emailed you our investigation. Thank you.

Necessity is the mother of all inventions!

JoelOssi

posted Feb 17 '20 at 11:57 am

Alright, thank you for investigating.

I will contact Mitre and inform them the CVE is a false positive.

Alright, thank you for investigating. I will contact Mitre and inform them the CVE is a false positive.

JoelOssi

posted Feb 18 '20 at 11:18 am

@admin @adesh can you make a backup of your user database, i want to try something, however before i try i need to be sure that you got a backup.

Pending draft

Confirm move posts

Insufficient permissions

Select a different topic

Edit history