Author: micah Date: 2006-02-09 16:20:20 +0000 (Thu, 09 Feb 2006) New Revision: 3449 Modified: data/CVE/list Log: Three new spip issues, CVE''s requested Modified: data/CVE/list ==================================================================--- data/CVE/list 2006-02-09 09:44:24 UTC (rev 3448) +++ data/CVE/list 2006-02-09 16:20:20 UTC (rev 3449) @@ -175,6 +175,15 @@ - spip <unfixed> (medium; bug #351335) CVE-2006-0517 (Multiple SQL injection vulnerabilities in ...) - spip <unfixed> (medium; bug #351334) +CVE-2006-XXXX (Input validation vulnerability in SPIP Spip_RSS.PHP) + - spip <unfixed> (medium; bug #352076) + NOTE: http://www.securityfocus.com/bid/16556 +CVE-2006-XXXX (SQL injection vulnerability in SPIP Spip_acces_doc.PHP) + - spip <unfixed> (medium; bug #352077) + NOTE: http://www.securityfocus.com/bid/16551 +CVE-2006-XXXX (XSS in SPIP spip_login.php3 and spip_pass.php3) + - spip <unfixed> (medium; bug #352078) + NOTE: http://pridels.blogspot.com/2005/12/spip-xss-vuln.html CVE-2006-0516 (Unspecified vulnerability in the kernel processing in Solaris 10 64 ...) NOT-FOR-US: Solaris CVE-2006-0515