[Secure-testing-commits] r14457 - data/CVE

[Pedro Ribeiro]

Author: pedrib-guest
Date: 2010-04-11 22:37:44 +0000 (Sun, 11 Apr 2010)
New Revision: 14457

Modified:
   data/CVE/list
Log:
a few NMUs plus a unaffected for drupal6


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-04-11 21:20:44 UTC (rev 14456)
+++ data/CVE/list	2010-04-11 22:37:44 UTC (rev 14457)
@@ -59,21 +59,21 @@
 CVE-2010-1304 (Directory traversal vulnerability in userstatus.php in the User Status ...)
    NOT-FOR-US: Joomla!
 CVE-2010-1303 (Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy ...)
-	TODO: check
+	- drupal6 <not-affected> (Vulnerable code not present)
 CVE-2010-XXXX [abcm2ps]
 	- abcm2ps <unfixed> (bug filed)
 CVE-2010-1302 (Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW ...)
-	TODO: check
+	NOT-FOR-US: Joomla!
 CVE-2010-1301 (SQL injection vulnerability in main.php in Centreon 2.1.5 allows ...)
-	TODO: check
+	NOT-FOR-US: Centreon
 CVE-2010-1300 (SQL injection vulnerability in index.php in Yamamah (aka Dove Photo ...)
-	TODO: check
+	NOT-FOR-US: Yamamah
 CVE-2010-1299 (Multiple PHP remote file inclusion vulnerabilities in DynPG CMS 4.1.0, ...)
-	TODO: check
+	NOT-FOR-US: DynPG CMS
 CVE-2008-7254 (Directory traversal vulnerability in includes/template-loader.php in ...)
-	TODO: check
+	NOT-FOR-US: Pepsi CMS
 CVE-2010-1298 (Directory traversal vulnerability in view.php in Pulse CMS 1.2.2 ...)
-	TODO: check
+	NOT-FOR-US: Pulse CMS
 CVE-2010-1297
 	RESERVED
 CVE-2010-1296