Hi,
I have found some security issues in phpwcms. I tried to report them to oliver@phpwcms.de and security@phpwcms.de, but these email addresses do not seem to exist (anymore).
I also tried to contact someone via PM, but PMs are disabled for me.
Can you please post an email address where security issues can be reported to?
Thanks!
Contact Email for Security Issues
Contact Email for Security Issues
Last edited by Oliver Georgi on Tue 19. Jul 2016, 18:12, edited 2 times in total.
Reason: solved
Reason: solved
-
Oliver Georgi
- Site Admin
- Posts: 9905
- Joined: Fri 3. Oct 2003, 22:22
- Contact:
Re: Contact Email for Security Issues
Thanks, I got your report and will try to solve the issues till the vulnerabilities are planned (29th of October) for disclosure.
To explain a bit to others. It has to do with uploads, inline PHP, CSRF. As far I have understood by now you need access to the backend for every of the issues. For sure, these issues should be solved.
If you have found security related issues too that should be fixed before being disclosed you can email me using security@phpwcms.org otherwise use GitHub issues.
To explain a bit to others. It has to do with uploads, inline PHP, CSRF. As far I have understood by now you need access to the backend for every of the issues. For sure, these issues should be solved.
If you have found security related issues too that should be fixed before being disclosed you can email me using security@phpwcms.org otherwise use GitHub issues.