[Secure-testing-commits] r23366 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-08-21 05:49:40 +0000 (Wed, 21 Aug 2013)
New Revision: 23366

Modified:
   data/CVE/list
Log:
two typo3 extensions, NFU

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-08-21 05:07:24 UTC (rev 23365)
+++ data/CVE/list	2013-08-21 05:49:40 UTC (rev 23366)
@@ -15,7 +15,7 @@
 CVE-2013-5308 (Cross-site scripting (XSS) vulnerability in the RealURL Management ...)
 	TODO: check
 CVE-2013-5307 (Cross-site scripting (XSS) vulnerability in the Faceted Search ...)
-	TODO: check
+	NOT-FOR-US: Faceted Search Typo3 extension
 CVE-2013-5306 (SQL injection vulnerability in the Browser - TYPO3 without PHP ...)
 	TODO: check
 CVE-2013-5305 (Cross-site scripting (XSS) vulnerability in the Store Locator ...)
@@ -25,7 +25,7 @@
 CVE-2013-5303 (Unspecified vulnerability in the Store Locator (locator) extension ...)
 	TODO: check
 CVE-2013-5302 (SQL injection vulnerability in the Faceted Search (ke_search) ...)
-	TODO: check
+	NOT-FOR-US: Faceted Search Typo3 extension
 CVE-2013-5301 (Directory traversal vulnerability in help.php in Trustport Webfilter ...)
 	TODO: check
 CVE-2013-5300 (Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open ...)