Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Bugtraq: Re: On product vulnerability history and vulnerability complexity

Re: On product vulnerability history and vulnerability complexity

From: Javor Ninov <drfrancky_at_securax.org>
Date: Tue, 04 Apr 2006 10:49:02 +0300

Sorry if i sound rude but:
Gadi Evron wrote:

> Looking even at web applications and their history one can easily tell if:
> 1. They are professionally written.
> 2. The vulnerabilities seen before and the ones we could find are not
> trivial or really say anything about the coder.
>
> That's how we chose WordPress for blogging.
So you mean that XSS is not trivial and difficult to spot ?
For today code XSS is unacceptable and speaks very for the author. 

--
Javor Ninov aka DrFrancky
securitydot.net

Received on Apr 04 2006
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]