[Secure-testing-commits] r44395 - data/CVE

Salvatore Bonaccorso carnil at moszumanska.debian.org
Wed Sep 7 17:50:38 UTC 2016


Author: carnil
Date: 2016-09-07 17:50:38 +0000 (Wed, 07 Sep 2016)
New Revision: 44395

Modified:
   data/CVE/list
Log:
Add another libphp-adodb issue

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2016-09-07 16:24:22 UTC (rev 44394)
+++ data/CVE/list	2016-09-07 17:50:38 UTC (rev 44395)
@@ -1,3 +1,8 @@
+CVE-2016-XXXX [incorrect quoting may allow SQL injection]
+	- libphp-adodb <unfixed>
+	NOTE: https://github.com/ADOdb/ADOdb/issues/226
+	NOTE: https://github.com/ADOdb/ADOdb/commit/bd9eca9
+	NOTE: CVE Request: http://www.openwall.com/lists/oss-security/2016/09/07/8
 CVE-2016-7153 (The HTTP/2 protocol does not consider the role of the TCP congestion ...)
 	TODO: check
 CVE-2016-7152 (The HTTPS protocol does not consider the role of the TCP congestion ...)




More information about the Secure-testing-commits mailing list