[Secure-testing-commits] r2639 - data/CVE

[Moritz Muehlenhoff]

Author: jmm-guest
Date: 2005-11-02 09:10:02 +0000 (Wed, 02 Nov 2005)
New Revision: 2639

Modified:
   data/CVE/list
Log:
acidbase not fixed yet


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2005-11-02 09:06:56 UTC (rev 2638)
+++ data/CVE/list	2005-11-02 09:10:02 UTC (rev 2639)
@@ -172,7 +172,8 @@
 CVE-2005-3326 (SQL injection vulnerability in usercp.php in MyBulletinBoard (MyBB) ...)
 	NOT-FOR-US: MyBB
 CVE-2005-3325 (SQL injection vulnerability in base_qry_main.php in Basic Analysis and ...)
-	- acidbase 1.2-2 (bug #335998)
+	- acidbase <unfixed> (bug #335998; bug #336788; medium)
+	NOTE: the fix from 1.2-2 did not address the problem fully
 	- acidlab 0.9.6b20-13
 CVE-2005-3324 (SQL injection vulnerability in chat.php in MWChat 6.8 allows remote ...)
 	NOT-FOR-US: MWChat