[Secure-testing-commits] r4251 - data/CVE

[Alec Berryman]

Author: alec-guest
Date: 2006-06-16 22:16:57 +0000 (Fri, 16 Jun 2006)
New Revision: 4251

Modified:
   data/CVE/list
Log:
* CVE-2006-3047 and CVE-2006-3048 (tikiwiki): medium, only in experimental
* NOT-FOR-US


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2006-06-16 21:14:30 UTC (rev 4250)
+++ data/CVE/list	2006-06-16 22:16:57 UTC (rev 4251)
@@ -1,35 +1,37 @@
 CVE-2006-3057 (Unspecified vulnerability in NetworkManager daemon for DHCP (dhcdbd) ...)
 	TODO: check
 CVE-2006-3056 (SQL injection vulnerability in language.php in VBZooM 1.01 allows ...)
-	TODO: check
+	NOT-FOR-US: VBZooM
 CVE-2006-3055 (Multiple SQL injection vulnerabilities in VBZooM 1.02 allow remote ...)
-	TODO: check
+	NOT-FOR-US: VBZooM
 CVE-2006-3054 (Multiple SQL injection vulnerabilities in VBZooM 1.11 allow remote ...)
-	TODO: check
+	NOT-FOR-US: VBZooM
 CVE-2006-3053 (PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 ...)
-	TODO: check
+	NOT-FOR-US: PHORUM
 CVE-2006-3052 (Cross-site scripting (XSS) vulnerability in Event Registration allows ...)
-	TODO: check
+	NOT-FOR-US: Event Registration
 CVE-2006-3051 (Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0 and ...)
-	TODO: check
+	NOT-FOR-US: SixCMS
 CVE-2006-3050 (Directory traversal vulnerability in detail.php in SixCMS 6.0 and ...)
-	TODO: check
+	NOT-FOR-US: SixCMS
 CVE-2006-3049 (Multiple cross-site scripting (XSS) vulnerabilities in booking3.php in ...)
-	TODO: check
+	NOT-FOR-US: Mole Group Ticket Booking Script
 CVE-2006-3048 (SQL injection vulnerability in TikiWiki 1.9.3.2 and possibly earlier ...)
-	TODO: check
+	- tikiwiki <unfixed> (medium)
+	NOTE: only in experimental
 CVE-2006-3047 (Cross-site scripting (XSS) vulnerability in tikiwiki 1.9.3.2 and ...)
-	TODO: check
+	- tikiwiki <unfixed> (medium)
+	NOTE: only in experimental
 CVE-2006-3046 (Unspecified vulnerability in the admin login feature in Subtext 1.5, ...)
-	TODO: check
+	NOT-FOR-US: Subtext
 CVE-2006-3045 (PHP remote file inclusion vulnerability in manage_songs.php in Foing ...)
-	TODO: check
+	NOT-FOR-US: Foing
 CVE-2006-3044 (Cross-site scripting (XSS) vulnerability in LogiSphere 1.6.0 allows ...)
-	TODO: check
+	NOT-FOR-US: LogiSphere
 CVE-2006-3043 (Cross-site scripting (XSS) vulnerability in search.cfm in CFXe-CMS 2.0 ...)
-	TODO: check
+	NOT-FOR-US: CFXe-CMS
 CVE-2006-3042 (Multiple PHP remote file inclusion vulnerabilities in ISPConfig 2.2.3 ...)
-	TODO: check
+	NOT-FOR-US: ISPConfig
 CVE-2006-3041 (** DISPUTED ** ...)
 	TODO: check
 CVE-2006-3040 (** DISPUTED ** ...)