web2project Security Vulnerability
Late last month, I received some bad news about web2project… It turns out that web2project was vulnerable to a handful…
Tag: Vulnerability
On Disaster Planning
Last week, I was teaching the Security Class for php|architect and talked not only about protecting your applications from security…
Vulnerability Disclosure / dotProject
In the past week, a few people have called me to task about referencing the dotProject vulnerability in the Project…
Sometimes Being Right…
… is the worst possible thing you can be. One of the aspects of the work that I do is…
dotProject 2.0.4 – Cross Site Scripting Vulnerability
Updated: See the alternative fix below… In the past 24 hours, I've received numerous panicked emails from dotProject users about…
On Reporting Problems
Chris Shiflett recently wrote on the inherent problems that go along with disclosing bugs in web applications (specifically security holes).…
PHP: Month of Bugs
As I write this, I'm reviewing some of the latest and greatest patches for the applications that I've learned to…
Data Security
Once upon a time, I worked for an organization who had web-based everything: timesheets, expense reports, and even various HR…
Web Vulnerabilities
Last week, Chris Shiflett pointed wrote about some of the problems and risks involved in Reporting Vulnerabilities. I'll ask a…
dotProject Security
I've had a number of people contact me recently concerning dotProject and potential security vulnerabilities. Most of these people were…