[Secure-testing-commits] r22886 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2013-07-09 12:13:39 +0000 (Tue, 09 Jul 2013)
New Revision: 22886

Modified:
   data/CVE/list
Log:
add entry for CVE-2013-4717

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-07-09 09:14:28 UTC (rev 22885)
+++ data/CVE/list	2013-07-09 12:13:39 UTC (rev 22886)
@@ -125,10 +125,12 @@
 	NOT-FOR-US: WEC Discussion Forum
 CVE-2013-4719 (SQL injection vulnerability in the SEO Pack for tt_news extension ...)
 	NOT-FOR-US: SEO Pack for tt_news extension for TYPO3
-CVE-2013-4718
+CVE-2013-4718 [XSS]
 	RESERVED
-CVE-2013-4717
+	NOT-FOR-US: OTRS ITSM	
+CVE-2013-4717 [SQL injection]
 	RESERVED
+	- otrs2 <unfixed>
 CVE-2012-6577 (SQL injection vulnerability in the Formhandler extension before 1.4.1 ...)
 	NOT-FOR-US: Formhandler TYPO3 extension
 CVE-2012-6576 (Cross-site scripting (XSS) vulnerability in the PRH Search module ...)