Michael S. Gilbert ha scritto: > are you sure about this? i had checked lenny, and saw the vulnerable > bit of code in wp-login.php.
I tried the PoF and it works only in 2.8.x. I didn't investigate the code because it really seems just an annoying bug, not a security issue. Cheers, Giuseppe.
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Secure-testing-team mailing list [email protected] http://lists.alioth.debian.org/mailman/listinfo/secure-testing-team

