Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.php > #14440
| Path | csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!us.feeder.erje.net!feeder.erje.net!eu.feeder.erje.net!news.albasani.net!weretis.net!feeder1.news.weretis.net!news.solani.org!.POSTED!not-for-mail |
|---|---|
| From | Thomas 'PointedEars' Lahn <PointedEars@web.de> |
| Newsgroups | comp.lang.php |
| Subject | Re: [CM] Drupal vulnerability hits millions |
| Date | Sat, 01 Nov 2014 08:11:58 +0100 |
| Organization | PointedEars Software (PES) |
| Lines | 24 |
| Message-ID | <1588700.UEJHn79vdc@PointedEars.de> (permalink) |
| References | <m30th2$gpv$1@solani.org> |
| Reply-To | Thomas 'PointedEars' Lahn <php@PointedEars.de> |
| Mime-Version | 1.0 |
| Content-Type | text/plain; charset="ISO-8859-1" |
| Content-Transfer-Encoding | 7Bit |
| X-Trace | solani.org 1414825919 17159 eJwFwYEBACAEBMCVkEfjRP3+I3SHFRqTHggHQR+RV8JBd+aY2G0TXKodZp6tvk+zaNVvtX4ivxF/ (1 Nov 2014 07:11:59 GMT) |
| X-Complaints-To | abuse@news.solani.org |
| NNTP-Posting-Date | Sat, 1 Nov 2014 07:11:59 +0000 (UTC) |
| User-Agent | KNode/4.14.1 |
| X-User-ID | eJwNwoERADEEBMCWCA7lkNB/Cf+zawLGdYVBbX/T2VxGE/smXUBHZ0wxZ4lo3dbzgXlwu8Ok2+9qhFRV8wdc8BX1 |
| Cancel-Lock | sha1:GL417LEULf0c3v2R0z2VnGzQGw0= |
| X-NNTP-Posting-Host | eJwNyEkBwDAIBEBLIVyLHKDgX0I6z1E2snYxNdHVJSl8sson/6W8uI44yT42HtslE4OuO4ZuPBSUEUY= |
| Xref | csiph.com comp.lang.php:14440 |
Show key headers only | View raw
RS Wood wrote: > <http://www.bbc.co.uk/news/technology-29846539#sa-> ns_mchannel=rss&ns_source=PublicRSS20-sa> You can read in what that article refers to that Drupal had an SQL injection vulnerability (SA-CORE-2014-005) that was fixed. SQL injection is not a problem limited to PHP. <http://en.wikipedia.org/wiki/SQL_injection> It would have been worth reporting here if a *PHP* vulnerability would have enabled the exploit, but so far it was only the negligence of Drupal developers that did. If you want to *discuss* news, fine. But no human gatewaying, please. Please provide your full name in the From header field as it is customary here. -- PointedEars Zend Certified PHP Engineer Twitter: @PointedEars2 Please do not Cc: me. / Bitte keine Kopien per E-Mail.
Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
[CM] Drupal vulnerability hits millions RS Wood <rsw@therandymon.com> - 2014-10-31 21:04 +0000
Re: [CM] Drupal vulnerability hits millions Jerry Stuckle <jstucklex@attglobal.net> - 2014-10-31 19:32 -0400
Re: [CM] Drupal vulnerability hits millions Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2014-11-01 08:11 +0100
Re: [CM] Drupal vulnerability hits millions Jerry Stuckle <jstucklex@attglobal.net> - 2014-11-01 09:33 -0400
csiph-web