Professional 1.2.15
Summary: PortSwigger released Burp Suite Professional 1.2.15 on 18 August 2009, adding scanner checks for XML external entity injection, server-side XML/SOAP injection, and vulnerable Flash cross-domain policies. The release also added a getScanIssues method to IBurpExtenderCallbacks that returns scan issues for URLs matching a literal prefix, and let users configure the scanner to skip all tests for specific parameters.
What you should know: The new skip-all-tests option exists for parameters whose modification causes problems like session termination, so a scanner configured to avoid disruption can leave those parameters untested entirely.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026