Contact Email for Security Issues

check this often to be informed about any security problem that was reported.
Post Reply
FooBar001
Posts: 1
Joined: Tue 29. Sep 2015, 16:03

Contact Email for Security Issues

Post by FooBar001 » Tue 29. Sep 2015, 16:06

Hi,

I have found some security issues in phpwcms. I tried to report them to oliver@phpwcms.de and security@phpwcms.de, but these email addresses do not seem to exist (anymore).

I also tried to contact someone via PM, but PMs are disabled for me.

Can you please post an email address where security issues can be reported to?

Thanks!
Last edited by Oliver Georgi on Tue 19. Jul 2016, 18:12, edited 2 times in total.
Reason: solved

User avatar
Oliver Georgi
Site Admin
Posts: 9450
Joined: Fri 3. Oct 2003, 22:22
Location: Dessau
Contact:

Re: Contact Email for Security Issues

Post by Oliver Georgi » Wed 30. Sep 2015, 05:56

Thanks, I got your report and will try to solve the issues till the vulnerabilities are planned (29th of October) for disclosure.

To explain a bit to others. It has to do with uploads, inline PHP, CSRF. As far I have understood by now you need access to the backend for every of the issues. For sure, these issues should be solved.

If you have found security related issues too that should be fixed before being disclosed you can email me using security@phpwcms.org otherwise use GitHub issues.
Oliver Georgi | phpwcms Developer | GitHub | LinkedIn | Kleintierpraxis am Georgengarten

Post Reply