[Secure-testing-commits] r10070 - data/CVE

[nion at alioth.debian.org]

Author: nion
Date: 2008-10-13 14:59:53 +0000 (Mon, 13 Oct 2008)
New Revision: 10070

Modified:
   data/CVE/list
Log:
adding bugzilla bug

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2008-10-13 12:24:07 UTC (rev 10069)
+++ data/CVE/list	2008-10-13 14:59:53 UTC (rev 10070)
@@ -184,7 +184,7 @@
 CVE-2008-4438 (Cross-site scripting (XSS) vulnerability in search.php in Datafeed ...)
 	NOT-FOR-US: Datafeed Studio
 CVE-2008-4437 (Directory traversal vulnerability in importxml.pl in Bugzilla before ...)
-	- bugzilla 3.0.5.0-1 (low)
+	- bugzilla 3.0.5.0-1 (low; bug #502019)
 CVE-2008-4436 (SQL injection vulnerability in bblog_plugins/builtin.help.php in bBlog ...)
 	NOT-FOR-US: bBlog
 CVE-2008-4435 (Multiple cross-site scripting (XSS) vulnerabilities in the RMSOFT ...)