[Secure-testing-commits] r4146 - data/CVE

[Florian Weimer]

Author: fw
Date: 2006-06-05 12:18:59 +0000 (Mon, 05 Jun 2006)
New Revision: 4146

Modified:
   data/CVE/list
Log:
dokuwiki issues


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-06-05 11:39:47 UTC (rev 4145)
+++ data/CVE/list	2006-06-05 12:18:59 UTC (rev 4146)
@@ -1,3 +1,7 @@
+CVE-2006-XXXX [XSS vulnerability in dokuwikis's "Fullname" and "E-Mail" fields]
+	- dokuwiki <unfixed> (medium)
+CVE-2006-XXXX [PHP injection vulnerability in dokuwiki via curly braces]
+	- dokuwiki <unfixed> (medium)
 CVE-2006-2805 (SQL injection vulnerability in VBulletin 3.0.10 allows remote ...)
 	TODO: check
 CVE-2006-2804 (Cross-site scripting (XSS) vulnerability in index.cfm in Goss iCM 7.0 ...)