Several Security Vulnerabilities identified on CPG 1.5.34

[zeroresearch]

Hi Admin,

Not sure whom should i spoken to about the security vulnerabilities that i have identified. Basically i have identified several security vulnerabilities on the latest CPG and would like to report this as part of responsible security advisory.

Please PM me for those who are responsible for the security side of CPG.

thanks,

Mahendra

[gmc]

PM sent...
I will provide details to the Dev Team when received.

Greg

[gmc]

Doc received and forwarded to Dev Team to review/address.
Thank you for your report!
Greg

[zeroresearch]

hi greg,

any updates from the dev team?

[Αndré]

Sorry for the delay, I've been quite busy the last days/weeks/months. I just posted patch proposals for all identified issues in the dev board. If they fix the issues as expected and don't break any existing features, a new Coppermine version will be released soon.

Thanks for your report!