View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0000152XMB1Bugspublic2008-09-06 11:182008-11-16 19:38
Reportermiqrogroove Assigned Tomiqrogroove  
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionfixed 
Product Version1.9.10 
Target Version1.9.11Fixed in Version1.9.11 
Summary0000152: Registered Global $permsNew in cp.php
DescriptionLooks like another SQL injection vulnerability in the 1.9.9 code base.
Steps To ReproduceNot disclosed.
TagsNo tags attached.
MySQL Version
PHP Version
Web Server
Browser
Flags
Original Reporter
SVN Revision1356

Activities

miqrogroove

2008-11-13 16:13

administrator   ~0000063

Removed the registered-global variable. Did not find any vulnerability.

Issue History

Date Modified Username Field Change
2008-09-06 11:18 miqrogroove New Issue
2008-11-13 16:13 miqrogroove SVN Revision => 1356
2008-11-13 16:13 miqrogroove Note Added: 0000063
2008-11-13 16:13 miqrogroove Status new => resolved
2008-11-13 16:13 miqrogroove Fixed in Version => 1.9.11
2008-11-13 16:13 miqrogroove Resolution open => fixed
2008-11-13 16:13 miqrogroove Assigned To => miqrogroove
2008-11-16 19:38 miqrogroove Status resolved => closed