[Secure-testing-commits] r9381 - data/CVE

[thomasbl-guest at alioth.debian.org]

Author: thomasbl-guest
Date: 2008-07-20 17:18:47 +0000 (Sun, 20 Jul 2008)
New Revision: 9381

Modified:
   data/CVE/list
Log:
CVE-2005-4600 wordpress not affected



Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-07-20 16:17:34 UTC (rev 9380)
+++ data/CVE/list	2008-07-20 17:18:47 UTC (rev 9381)
@@ -41197,10 +41197,9 @@
 CVE-2005-4602 (SQL injection vulnerability in inc/function_upload.php in MyBB before ...)
 	NOT-FOR-US: MyBB (aka MyBulletinBoard)
 CVE-2005-4600 (Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE ...)
-	TODO: check wordpress
-	NOTE: pinged maintainer
 	- knowledgeroot <not-affected> (fixed before first upload; see bug #381912)
 	- moodle <not-affected> (has newer version)
+	- wordpress <not-affected> (code doesn't exists anymore)
 CVE-2005-4599 (Cross-site scripting (XSS) vulnerability in tiny_mce_gzip.php in ...)
 	TODO: check wordpress, moodle
 	- knowledgeroot <not-affected> (fixed before first upload; see bug #381912)