[Secure-testing-commits] r14301 - data/CVE

[Michael Gilbert]

Author: gilbert-guest
Date: 2010-03-19 22:17:13 +0000 (Fri, 19 Mar 2010)
New Revision: 14301

Modified:
   data/CVE/list
Log:
NFUs; gnudip issue got a CVE

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2010-03-19 21:14:22 UTC (rev 14300)
+++ data/CVE/list	2010-03-19 22:17:13 UTC (rev 14301)
@@ -35,39 +35,39 @@
 CVE-2010-0986
 	RESERVED
 CVE-2009-4735 (SQL injection vulnerability in login.php in Allomani Audio & Video ...)
-	TODO: check
+	NOT-FOR-US: Allomani Audio & Video Library
 CVE-2009-4734 (SQL injection vulnerability in login.php in Allomani Movies Library ...)
-	TODO: check
+	NOT-FOR-US: Allomani Movies Library
 CVE-2009-4733 (SQL injection vulnerability in checkuser.php in SimpleLoginSys 0.5, ...)
-	TODO: check
+	NOT-FOR-US: SimpleLoginSys
 CVE-2009-4732 (SQL injection vulnerability in tt/index.php in TT Web Site Manager ...)
-	TODO: check
+	NOT-FOR-US: TT Web Site Manager
 CVE-2009-4731 (SQL injection vulnerability in photos.php in Model Agency Manager PRO ...)
-	TODO: check
+	NOT-FOR-US: Model Agency Manager PRO
 CVE-2009-4730 (SQL injection vulnerability in report.php in x10 Adult Media Script ...)
-	TODO: check
+	NOT-FOR-US: Adult Media Script
 CVE-2009-4729 (Multiple cross-site scripting (XSS) vulnerabilities in x10 Adult Media ...)
-	TODO: check
+	NOT-FOR-US: Adult Media Script
 CVE-2009-4728 (SQL injection vulnerability in the administrative interface in ...)
-	TODO: check
+	NOT-FOR-US: Questions Answered
 CVE-2009-4727 (SQL injection vulnerability in x/login in JungleScripts Ajax Short Url ...)
-	TODO: check
+	NOT-FOR-US: JungleScripts Ajax Short Url
 CVE-2009-4726 (Directory traversal vulnerability in download.php in Quickdev 4 PHP ...)
-	TODO: check
+	NOT-FOR-US: Quickdev 4 PHP
 CVE-2009-4725 (Directory traversal vulnerability in modules/aljazeera/admin/setup.php ...)
-	TODO: check
+	NOT-FOR-US: Arab Portal
 CVE-2009-4724 (SQL injection vulnerability in shop.htm in PaymentProcessorScript.net ...)
-	TODO: check
+	NOT-FOR-US: PaymentProcessorScript.net PPScript
 CVE-2009-4723 (Directory traversal vulnerability in confirm.php in Netpet CMS 1.9 ...)
-	TODO: check
+	NOT-FOR-US: Netpet CMS
 CVE-2009-4722 (SQL injection vulnerability in the CheckLogin function in ...)
-	TODO: check
+	NOT-FOR-US: Limny
 CVE-2009-4721 (Multiple SQL injection vulnerabilities in Admin/index.asp in ...)
-	TODO: check
+	NOT-FOR-US: Andrews-Web BannerAd
 CVE-2009-4720 (SQL injection vulnerability in cgi-bin/gnudip.cgi in GnuDIP 2.1.1 ...)
-	TODO: check
+	- gnudip <removed>
 CVE-2009-4719 (SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows ...)
-	TODO: check
+	NOT-FOR-US: Discloser
 CVE-2010-XXXX [dojo can be used as a redirector]
 	- dojo <unfixed> (low)
 	TODO: check
@@ -2709,7 +2709,7 @@
 CVE-2010-0105
 	RESERVED
 CVE-2010-0104 (Unspecified vulnerability in the Broadcom Integrated NIC Management ...)
-	TODO: check
+	NOT-FOR-US: Broadcom Integrated NIC Management Firmware
 CVE-2010-0103 (UsbCharger.dll in the Energizer DUO USB battery charger software ...)
 	NOT-FOR-US: Energizer DUO USB Battery Charger Software
 CVE-2010-0102