Discovered security vulnerabilities

Viewing 13 replies - 1 through 13 (of 13 total)
  • Thread Starter nitstorm

    (@nitstorm)

    11 years ago

    Hi Noah,

    Should I follow the same procedure as done in Google Analyticator and post the vulnerability issue here itself?

    Thanks & regards,
    Nitin Venkatesh

    jholla

    (@jholla)

    11 years ago

    Does this have anything to do with WhytoShy?

    Thread Starter nitstorm

    (@nitstorm)

    11 years ago

    I don’t know what WhytoShy is, so probably not…

    Thread Starter nitstorm

    (@nitstorm)

    11 years ago

    Hi,

    Could I get an acknowledgement please? Is there an email ID I could send my report to?

    Thanks & regards,
    Nitin Venkatesh

    Vasu Chawla

    (@vchawla26)

    11 years ago

    whyToShy seems to be the facebook app whose ID is linked in settings somewhere.

    Thread Starter nitstorm

    (@nitstorm)

    11 years ago

    @vasu: Nope, that does not seem to be the issue from my guess.

    Vasu Chawla

    (@vchawla26)

    11 years ago

    func.php has the app id harcoded

    see: http://prntscr.com/7dqxb3

    Thread Starter nitstorm

    (@nitstorm)

    11 years ago

    @vasu: That is definitely not the issue I am referring to in my case.

    Thread Starter nitstorm

    (@nitstorm)

    10 years, 12 months ago

    Hi Plugin Authors,

    Could you please acknowledge this thread and is there an email ID I can send the report to?

    Nitin

    Plugin Author Garrett Grimm

    (@grimmdude)

    10 years, 11 months ago

    Hi Nitin,

    I’m looking at this vulnerability, can you please contact me and clarify what you see?
    http://grimmdude.com/contact

    Thanks,
    -Garrett

    Thread Starter nitstorm

    (@nitstorm)

    10 years, 11 months ago

    Hi Garrett,

    Thank you. I have written to you at the specified contact form. Please do get back to me should you require any further information.

    Thanks & regards,
    Nitin

    Plugin Author Garrett Grimm

    (@grimmdude)

    10 years, 11 months ago

    This vulnerability has been resolved.

    -Garrett

    Thread Starter nitstorm

    (@nitstorm)

    10 years, 11 months ago

    Thank you Garrett for the update. As mentioned in the e-mail conversation, a disclosure with the Proof-of-Concept code will be published on Aug 9,2015 (45 days from the day of update release).

    Thanks & regards,
    Nitin Venkatesh

Viewing 13 replies - 1 through 13 (of 13 total)

The topic ‘Discovered security vulnerabilities’ is closed to new replies.