Kommentare

Serendipity 1.1.3 and 1.2-beta2 released due to SQL exploit

Ben am um :

Thx...Very fast. I made a whole update, but this patch works also well...

disgruntled user am um :

Too bad the late great hacker Dr. Neal Krawetz didn't find this vulnerability. He just checked his http logs after getting owned.

Really? am um :

How was he owned? As of 10 minutes ago, he seems to be running a non-vulerable version of s9y. I've sent him an email asking about this.

Really? am um :

That was fast. He just wrote back and included some of his logs. He says he wasn't owned and his logs show someone trying different SQL variations for more than 12 hours without success.

Hey disgruntled user: his last log entry was from a few hours ago, just before your posting here. Are you the guy at 24.154.233.208 who failed to own his blog?

Niels am um :

thx!

that was very fast. i love this software ;)