phpwcms Support Forum

Hi,

I have found some security issues in phpwcms. I tried to report them to oliver@phpwcms.de and security@phpwcms.de, but these email addresses do not seem to exist (anymore).

I also tried to contact someone via PM, but PMs are disabled for me.

Can you please post an email address where security issues can be reported to?

Thanks!

Thanks, I got your report and will try to solve the issues till the vulnerabilities are planned (29th of October) for disclosure.

To explain a bit to others. It has to do with uploads, inline PHP, CSRF. As far I have understood by now you need access to the backend for every of the issues. For sure, these issues should be solved.

If you have found security related issues too that should be fixed before being disclosed you can email me using security@phpwcms.org otherwise use GitHub issues.