2007 September Archive at T. Longren

Archive for September, 2007

WordPress Theme: Unwakeable 1.2.1

Published by Tyler on 4 September 2007 in Internet, Noteworthy, PHP, Personal, Security, Unwakeable and WordPress. 3 Comments 1 Star

(7 votes, average: 3.86 out of 5)

I hadn’t planned on releasing another version of Unwakeable in the 1.x series, yet here it is. The release of Unwakeable 1.2.1 was prompted after the discovery of a cross-site scripting (XSS) vulnerability in the Unwakeable search functions.

The vulnerability makes it possible for people to run malicious code that could, for example, steal all [...]

Popularity: 23% [?]

Unwakeable XSS Vulnerability

Published by Tyler on 3 September 2007 in Internet, Noteworthy, PHP, Personal, Security, Unwakeable and WordPress. 5 Comments 1 Star

(5 votes, average: 4 out of 5)

It was brought to my attention a couple days ago that Unwakeable 1.2 contains a cross-site scripting (XSS) vulnerability in the search piece. To test to see if you’re vulnerable, search for this on your Unwakeable site:
<script>alert(’XSS Vulnerability!’);</script>
If you see a javascript popup after searching, you’re vulnerable to attack and should follow the steps [...]

Popularity: 19% [?]