I can't agree with this risk rating. Blind sql injection can be used in this case to extract database content. I've checked it and it works like a charm.
ahappycustomer am um :
now i am happy that i run a 4 year old version of s9y that is not affected by this bug. thank you so much for s9y, i'm a very happy "customer" :)
and yes, i know that 1.3 had security issues since then, but those are all limited to weird extensions or being an admin if i don't miss anything.
so thanks again, this proves so much how s9y is superior to wordpress when it comes to security.
Hi Pawel! Can you explain how you achieve that? The query is only executed, and no returned data is passed along to output, so I don't exactly see how this can be used. I am not a SQL security expert, so if you can explain the situation, of course I would raise the risk assassment in that case!
Pawel Golen am um :
I can't agree with this risk rating. Blind sql injection can be used in this case to extract database content. I've checked it and it works like a charm.
ahappycustomer am um :
now i am happy that i run a 4 year old version of s9y that is not affected by this bug. thank you so much for s9y, i'm a very happy "customer" :)
and yes, i know that 1.3 had security issues since then, but those are all limited to weird extensions or being an admin if i don't miss anything. so thanks again, this proves so much how s9y is superior to wordpress when it comes to security.
Garvin am um :
Hi Pawel! Can you explain how you achieve that? The query is only executed, and no returned data is passed along to output, so I don't exactly see how this can be used. I am not a SQL security expert, so if you can explain the situation, of course I would raise the risk assassment in that case!
Thanks for your input, Garvin
Pawel Golen am um :
I've sent you an email at blog@... with details. I hope you got it.
Garvin am um :
Thanks a lot for your specific email, now I see a lot clearer and have changed this blog text accordingly.