I have found some security issues in phpwcms. I tried to report them to firstname.lastname@example.org and email@example.com, but these email addresses do not seem to exist (anymore).
I also tried to contact someone via PM, but PMs are disabled for me.
Can you please post an email address where security issues can be reported to?
- Oliver Georgi
- Site Admin
- Posts: 9578
- Joined: Fri 3. Oct 2003, 22:22
- Location: Moscow, Russia
To explain a bit to others. It has to do with uploads, inline PHP, CSRF. As far I have understood by now you need access to the backend for every of the issues. For sure, these issues should be solved.
If you have found security related issues too that should be fixed before being disclosed you can email me using firstname.lastname@example.org otherwise use GitHub issues.