[Secure-testing-commits] r14847 - data/CVE

[Nico Golde]

Author: nion
Date: 2010-06-10 12:18:11 +0000 (Thu, 10 Jun 2010)
New Revision: 14847

Modified:
   data/CVE/list
Log:
CVE-2010-1738 affects lxr and lxr-cvs

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-06-10 12:07:02 UTC (rev 14846)
+++ data/CVE/list	2010-06-10 12:18:11 UTC (rev 14847)
@@ -1138,9 +1138,8 @@
 CVE-2010-1739 (SQL injection vulnerability in the Newsfeeds (com_newsfeeds) component ...)
 	NOT-FOR-US: com_newsfeeds component for joomla!
 CVE-2010-1738 (Cross-site scripting (XSS) vulnerability in lib/LXR/Common.pm in LXR ...)
-	- lxr <undetermined>
-	- lxr-cvs <undetermined>
-	TODO: check
+	- lxr <unfixed> (low; bug #585411)
+	- lxr-cvs <unfixed> (low; bug #585412)
 CVE-2010-1737 (PHP remote file inclusion vulnerability in ...)
 	NOT-FOR-US: Gallo
 CVE-2010-1736 (KrM Haber 1.0 stores sensitive information under the web root with ...)