[Secure-testing-commits] r6476 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2007-09-03 10:55:46 +0000 (Mon, 03 Sep 2007)
New Revision: 6476

Modified:
   data/CVE/list
Log:
fixed CVE-2007-4048 egroupware-phpsysinfo in 1.2.107-2.dfsg-1.1 upload


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2007-09-03 09:14:06 UTC (rev 6475)
+++ data/CVE/list	2007-09-03 10:55:46 UTC (rev 6476)
@@ -1266,7 +1266,7 @@
 CVE-2007-4048 (Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo ...)
 	- phpsysinfo 2.5.1-6.1 (low; bug #435935)
 	- phpgroupware-phpsysinfo <unfixed> (low; bug #435936)
-	- egroupware-phpsysinfo <unfixed> (low; bug #435937)
+	- egroupware-phpsysinfo 1.2.107-2.dfsg-1.1 (low; bug #435937)
 CVE-2007-4047 (geoBlog (aka BitDamaged) 1 does not require authentication for (1) ...)
 	NOT-FOR-US: geoBlog
 CVE-2007-4046 (SQL injection vulnerability in index.php in the Pony Gallery ...)