It's my pleasure to say that new release of phpMyAdmin is waiting for You! :)
My last post about phpMyAdmin 3.4.9 0day as a matter of fact was about 3.4.10 too.
But I didn't want to write about it until patch release .
Details here.
Now You can try new PMA. 0day fixed! ;)
Once again excellent work with PMA Security Team.
Their speed and practical solutions are amazing!
Thanks again and best regards! ;)
Showing posts with label phpMyAdmin. Show all posts
Showing posts with label phpMyAdmin. Show all posts
Saturday, 18 February 2012
Friday, 17 February 2012
Why I'm testing TOP20 WebApps
Let's say... this post is an answer to all Your questions in all e-mails about:
"why I don't release any PMA/*cms*/etc... 0days?".
So answer is:
because all technical information I sent to Vendor.
I don want to release any of those codes because:
1. A lot of admins on the world, do not upgrade their PMA "for years" (;)).
So "no skid help" here. Even if Vendor release patched version. :*
2. I use this codes to pentest Your server's :P ... after we "sign a papers" to do it ;)
Full (and only) legal ideas, please. Really ;)
More questions? Feel free to ask @ mail / comments.
Cheers!
"why I don't release any PMA/*cms*/etc... 0days?".
So answer is:
because all technical information I sent to Vendor.
I don want to release any of those codes because:
1. A lot of admins on the world, do not upgrade their PMA "for years" (;)).
So "no skid help" here. Even if Vendor release patched version. :*
2. I use this codes to pentest Your server's :P ... after we "sign a papers" to do it ;)
Full (and only) legal ideas, please. Really ;)
More questions? Feel free to ask @ mail / comments.
Cheers!
Tuesday, 14 February 2012
phpMyAdmin 3.4.9 0day
After 2 days of coding, there is an 0day for phpMyAdmin 3.4.9.
No public details this time.
* Update 15.02.2012 *
* 18:00 *
After few hours of this post I saw new (3.4.10) release of phpMyAdmin...
You must check it out and update at www.phpMyAdmin.net !
Enjoy ;)
No public details this time.
* Update 15.02.2012 *
* 18:00 *
After few hours of this post I saw new (3.4.10) release of phpMyAdmin...
You must check it out and update at www.phpMyAdmin.net !
Enjoy ;)
* 19:44 *
Security Team was informed. :)
* Weekend updates *
This weekend phpMyAdmin Team released new version, so a little update here or here ;)
Labels:
0day,
exploit,
phpMyAdmin,
projects,
research,
vulnerability
Subscribe to:
Posts (Atom)