[Bug 62272] Security review of TargetProcess Bugzilla module

2014-05-28 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=62272 Greg Grossmeier changed: What|Removed |Added Priority|Normal |Lowest --- Comment #5 from Greg Gros

[Bug 62272] Security review of TargetProcess Bugzilla module

2014-04-27 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=62272 --- Comment #4 from Andre Klapper --- Is this still wanted, or can this ticket be closed? -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. __

[Bug 62272] Security review of TargetProcess Bugzilla module

2014-03-17 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=62272 Chris Steipp changed: What|Removed |Added Assignee|cste...@wikimedia.org |wikibugs-l@lists.wikimedia.

[Bug 62272] Security review of TargetProcess Bugzilla module

2014-03-11 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=62272 Andre Klapper changed: What|Removed |Added Priority|Unprioritized |Normal -- You are receiving this mail

[Bug 62272] Security review of TargetProcess Bugzilla module

2014-03-06 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=62272 --- Comment #3 from Chris Steipp --- As it's written, it does a very poor job of security. They parameterize most of their sql (except the one on 376, but hopefully bugzilla wouldn't have an extra feature name that contained sql), so it probabl

[Bug 62272] Security review of TargetProcess Bugzilla module

2014-03-06 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=62272 --- Comment #2 from Andre Klapper --- (In reply to Ori Livneh from comment #0) > We're considering using TargetProcess's KanBan board Who's "we" in this context? tp2.cgi says my $supportedBugzillaVersion = '4.2'; But we run 4.4. ("we" = t

[Bug 62272] Security review of TargetProcess Bugzilla module

2014-03-06 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=62272 Antoine "hashar" Musso changed: What|Removed |Added CC||has...@free.fr --- Comment #1

[Bug 62272] Security review of TargetProcess Bugzilla module

2014-03-05 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=62272 Ori Livneh changed: What|Removed |Added CC||o...@wikimedia.org Assignee|wik