<<< Date Index >>> <<< Thread Index >>>

Re: Joomla 1.0.13 CSRF

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: Joomla 1.0.13 CSRF
From: "J. Carlos Nieto" <xiam@xxxxxxxxxxxxxxxx>
Date: Tue, 08 Jan 2008 12:36:56 -0600
In-reply-to: <4783BBF5.90601@xxxxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <4783BBF5.90601@xxxxxxxxxxxxxxxx>
User-agent: Thunderbird 2.0.0.6 (X11/20070728)

J. Carlos Nieto wrote:


There exists a Cross Site Scripting security hole in Joomla 1.0.13.

Sorry, it should be "Cross Site Request Forgery".

References:
- Joomla 1.0.13 CSRF
  - From: J. Carlos Nieto

Prev by Date: Joomla 1.0.13 CSRF
Next by Date: [SECURITY] [DSA 1455-1] New libarchive1 packages fix several problems
Previous by thread: Joomla 1.0.13 CSRF
Next by thread: [SECURITY] [DSA 1455-1] New libarchive1 packages fix several problems
Index(es):
- Date
- Thread