[Secure-testing-commits] r33190 - data/CVE

[Henri Salo]

Author: fgeek-guest
Date: 2015-03-27 15:19:10 +0000 (Fri, 27 Mar 2015)
New Revision: 33190

Modified:
   data/CVE/list
Log:
ocportal itp

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-03-27 15:14:55 UTC (rev 33189)
+++ data/CVE/list	2015-03-27 15:19:10 UTC (rev 33190)
@@ -147,7 +147,7 @@
 CVE-2015-2678 (Multiple cross-site scripting (XSS) vulnerabilities in MetalGenix ...)
 	TODO: check
 CVE-2015-2677 (Multiple cross-site scripting (XSS) vulnerabilities in ocPortal before ...)
-	TODO: check
+	- ocportal <itp> (bug #625865)
 CVE-2015-2676 (Cross-site request forgery (CSRF) vulnerability in the ASUS RT-G32 ...)
 	NOT-FOR-US: Asus
 CVE-2015-2689 [Assertion failure in dns.c, possibly connected to UDP DoS attack]
@@ -175690,7 +175690,7 @@
 CVE-2004-1593 (Cross-site scripting (XSS) vulnerability in ...)
 	NOT-FOR-US: SCT email client
 CVE-2004-1592 (PHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 ...)
-	NOT-FOR-US: ocPortal
+	- ocportal <itp> (bug #625865)
 CVE-2004-1591 (The web interface for Micronet Wireless Broadband Router SP916BM ...)
 	NOT-FOR-US: Micronet Wireless Router
 CVE-2004-1590 (Clientexec allows remote attackers to gain sensitive information via ...)