[Secure-testing-commits] r24206 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2013-10-29 13:13:29 +0000 (Tue, 29 Oct 2013)
New Revision: 24206

Modified:
   data/CVE/list
Log:
dolibarr CVE-2011-4814, CVE-2012-1225, CVE-2012-1226

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2013-10-29 12:40:26 UTC (rev 24205)
+++ data/CVE/list	2013-10-29 13:13:29 UTC (rev 24206)
@@ -30012,11 +30012,9 @@
 CVE-2012-1227 (Multiple cross-site request forgery (CSRF) vulnerabilities in ...)
 	NOT-FOR-US: pluck
 CVE-2012-1226 (Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 ...)
-	- dolibarr <unfixed>
-	TODO: check
+	- dolibarr 3.3.4-1
 CVE-2012-1225 (Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and ...)
-	- dolibarr <unfixed>
-	TODO: check
+	- dolibarr 3.3.4-1
 CVE-2012-1224 (Cross-site scripting (XSS) vulnerability in system/classes/login.php ...)
 	NOT-FOR-US: ContentLion Alpha
 CVE-2012-1223 (RabidHamster R2/Extreme 1.65 and earlier uses a small search space of ...)
@@ -33658,8 +33656,7 @@
 CVE-2012-0121 (Unspecified vulnerability in HP Data Protector Express (aka DPX) ...)
 	NOT-FOR-US: HP Data Protector Express
 CVE-2011-4814 (Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 ...)
-	- dolibarr <unfixed>
-	TODO: check
+	- dolibarr 3.3.4-1 (low)
 CVE-2011-4813 (Directory traversal vulnerability in clientarea.php in ...)
 	NOT-FOR-US: WHMCompleteSolution
 CVE-2011-4812 (Cross-site scripting (XSS) vulnerability in nowosci.php in BestShopPro ...)