[Secure-testing-commits] r44395 - data/CVE
Salvatore Bonaccorso
carnil at moszumanska.debian.org
Wed Sep 7 17:50:38 UTC 2016
Author: carnil
Date: 2016-09-07 17:50:38 +0000 (Wed, 07 Sep 2016)
New Revision: 44395
Modified:
data/CVE/list
Log:
Add another libphp-adodb issue
Modified: data/CVE/list
===================================================================
--- data/CVE/list 2016-09-07 16:24:22 UTC (rev 44394)
+++ data/CVE/list 2016-09-07 17:50:38 UTC (rev 44395)
@@ -1,3 +1,8 @@
+CVE-2016-XXXX [incorrect quoting may allow SQL injection]
+ - libphp-adodb <unfixed>
+ NOTE: https://github.com/ADOdb/ADOdb/issues/226
+ NOTE: https://github.com/ADOdb/ADOdb/commit/bd9eca9
+ NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/09/07/8
CVE-2016-7153 (The HTTP/2 protocol does not consider the role of the TCP congestion ...)
TODO: check
CVE-2016-7152 (The HTTPS protocol does not consider the role of the TCP congestion ...)
More information about the Secure-testing-commits
mailing list