[Secure-testing-commits] r5107 - data/CVE

Neil McGovern neilm at alioth.debian.org
Mon Dec 11 23:21:07 CET 2006


Author: neilm
Date: 2006-12-11 23:21:05 +0100 (Mon, 11 Dec 2006)
New Revision: 5107

Modified:
   data/CVE/list
Log:
phpmyadmin 4:2.8.1-1 CVE-2006-1803 not present in sarge

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-12-11 12:23:40 UTC (rev 5106)
+++ data/CVE/list	2006-12-11 22:21:05 UTC (rev 5107)
@@ -10470,7 +10470,8 @@
 	[sarge] - phpmyadmin <not-affected>
 CVE-2006-1803 (Cross-site scripting (XSS) vulnerability in sql.php in phpMyAdmin ...)
 	- phpmyadmin 4:2.8.1-1 (bug #363519; low)
-	[sarge] - phpmyadmin <no-dsa> (CSRF code not present in Sarge, too intrusive to backport)
+	[sarge] - phpmyadmin <not-affected> (CSRF code not present in Sarge, too intrusive to backport)
+	NOTE: maintainer considers this not-affected.
 CVE-2006-1802 (Cross-site scripting (XSS) vulnerability in index.php in ...)
 	NOT-FOR-US: TinyWebGallery
 CVE-2006-1801 (Cross-site scripting (XSS) vulnerability in planetsearchplus.php in ...)




More information about the Secure-testing-commits mailing list