Full Disclosure: Re: WordPress Authenticated File Upload Authorisation Bypass

[Carlos Alberto Lopez Perez <clopez () igalia com>]

On 22/06/12 01:14, Benji wrote:
> I hear Trustwave are reporting similar issues, like the fact you can
> specify remote mysql servers in new installations, amazing right? Do
> you work for them?
>
> Btw, with phpmyadmin you can injection sql commands !!!!!!!
:D that was so funny


-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Carlos Alberto Lopez Perez                           http://neutrino.es
Igalia - Free Software Engineering                http://www.igalia.com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/