[Git][security-tracker-team/security-tracker][master] Track as well php-hord-eturba source package

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e46742be by Salvatore Bonaccorso at 2018-09-30T12:02:35Z
Track as well php-hord-eturba source package

tuba/search.php is included in the php-horde-turba source package.

Still upstream is unable to confirm the SQL injections issues and the
CVE might be invalid or disputed at least.

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -38427,6 +38427,7 @@ CVE-2017-17782 (In GraphicsMagick 1.3.27a, there is a heap-based buffer over-rea
 	NOTE: https://sourceforge.net/p/graphicsmagick/bugs/530/
 CVE-2017-17781 (In Horde Groupware through 5.2.22, SQL Injection exists via the group ...)
 	- php-horde <undetermined>
+	- php-horde-turba <undetermined>
 	NOTE: http://code610.blogspot.com/2017/12/modus-operandi-horde-52x.html
 	NOTE: https://bugs.horde.org/ticket/14857
 CVE-2017-17780 (The Clockwork SMS clockwork-test-message.php component has XSS via a ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e46742be8dea35e7cbd81992124126fb2d4e0d0b

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/e46742be8dea35e7cbd81992124126fb2d4e0d0b
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20180930/273bd8ba/attachment.html>