[Secure-testing-commits] r5077 - data/CVE

Micah Anderson
Wed, 06 Dec 2006 03:12:51 -0000

Author: micah
Date: 2006-12-06 03:12:46 +0100 (Wed, 06 Dec 2006)
New Revision: 5077

Modified:
   data/CVE/list
Log:
more NFUs


Modified: data/CVE/list
==================================================================---
data/CVE/list	2006-12-06 01:59:32 UTC (rev 5076)
+++ data/CVE/list	2006-12-06 02:12:46 UTC (rev 5077)
@@ -66,38 +66,38 @@
 CVE-2006-6248 (index.php in GPhotos 1.5 allows remote attackers to obtain
sensitive ...)
 	TODO: check
 CVE-2006-6247 (Multiple SQL injection vulnerabilities in Uapplication
UPhotoGallery ...)
-	TODO: check
+	NOT-FOR-US: UPhotoGallery
 CVE-2006-6246 (Photo Organizer 2.32b and earlier does not properly check the
...)
-	TODO: check
+	NOT-FOR-US: Photo Organizer
 CVE-2006-6245 (Multiple SQL injection vulnerabilities in Photo Organizer (PO)
2.32b ...)
-	TODO: check
+	NOT-FOR-US: Photo Organizer
 CVE-2006-6244 (Coalescent Systems freePBX (formerly Asterisk Management Portal)
...)
-	TODO: check
+	NOT-FOR-US: Coalescent Systems freePBX
 CVE-2006-6243 (Multiple SQL injection vulnerabilities in index.asp in FipsSHOP
allow ...)
-	TODO: check
+	NOT-FOR-US: FipsSHOP
 CVE-2006-6242 (Multiple directory traversal vulnerabilities in Serendipity
1.0.3 and ...)
 	- serendipity 1.0.4-1 (unimportant; bug #401614)
 	NOTE: Only exploitable with register_globals
 CVE-2006-6241 (Sorin Chitu Telnet-FTP Server 1.0 allows remote authenticated
users to ...)
-	TODO: check
+	NOT-FOR-US: Sorin Chitu Telnet-FTP Server
 CVE-2006-6240 (Directory traversal vulnerability in Sorin Chitu Telnet-FTP
Server 1.0 ...)
-	TODO: check
+	NOT-FOR-US: Sorin Chitu Telnet-FTP Server
 CVE-2006-6239 (webadmin in MailEnable NetWebAdmin Profession 2.32 and
Enterprise 2.32 ...)
 	TODO: MailEnable NetWebAdmin
 CVE-2006-6238 (The AutoFill feature in Apple Safari 2.0.4 does not properly
verify ...)
-	TODO: check
+	NOT-FOR-US: Apple Safari
 CVE-2006-6237 (SQL injection vulnerability in the decode_cookie function in
...)
-	TODO: check
+	NOT-FOR-US: Woltlab Burning Board Lite
 CVE-2006-6236 (Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows
remote ...)
 	TODO: check
 CVE-2006-6235
 	RESERVED
 CVE-2006-6234 (Multiple SQL injection vulnerabilities in the Content module in
...)
-	TODO: check
+	NOT-FOR-US: PHP-Nuke
 CVE-2006-6233 (SQL injection vulnerability in the Downloads module for unknown
...)
-	TODO: check
+	NOT-FOR-US: PostNuke
 CVE-2006-6232 (PHP remote file inclusion vulnerability in admin/index.php in
...)
-	TODO: check
+	NOT-FOR-US: DreamAccount
 CVE-2006-6231 (vuBB 0.2.1 and earlier allows remote attackers to obtain
sensitive ...)
 	NOT-FOR-US: VuBB
 CVE-2006-6230 (SQL injection vulnerability in vuBB 0.2.1 and earlier allows
remote ...)
@@ -111,9 +111,9 @@
 CVE-2006-6226 (Multiple format string vulnerabilities in NeoEngine 0.8.2 and
earlier, ...)
 	NOT-FOR-US: NeoEngine
 CVE-2006-6225 (Multiple PHP remote file inclusion vulnerabilities in GeekLog
1.4 ...)
-	TODO: check
+	NOT-FOR-US: GeekLog
 CVE-2006-6224 (PHP remote file inclusion vulnerability in the installation
scripts in ...)
-	TODO: check
+	NOT-FOR-US: Puntal
 CVE-2006-6223 (Cross-site scripting (XSS) vulnerability in Google Search
Appliance ...)
 	NOT-FOR-US: Google Search Appliance
 CVE-2006-6222
@@ -121,39 +121,39 @@
 CVE-2006-6221
 	RESERVED
 CVE-2006-6220 (Multiple SQL injection vulnerabilities in Recipes Website
(Recipes ...)
-	TODO: check
+	NOT-FOR-US: Recipes Complete Website
 CVE-2006-6219 (Multiple cross-site scripting (XSS) vulnerabilities in index.php
in ...)
-	TODO: check
+	NOT-FOR-US: dev4u CMS
 CVE-2006-6218 (Multiple SQL injection vulnerabilities in index.php in dev4u CMS
allow ...)
-	TODO: check
+	NOT-FOR-US: dev4u CMS
 CVE-2006-6217 (PHP remote file inclusion vulnerability in formdisp.php in the
Mermaid ...)
-	TODO: check
+	NOT-FOR-US: Mermaid module for PHP-NUKE
 CVE-2006-6216 (SQL injection vulnerability in admin_hacks_list.php in the
Nivisec ...)
-	TODO: check
+	NOT-FOR-US: Nivisec Hacks List
 CVE-2006-6215 (Multiple SQL injection vulnerabilities in Wallpaper Website
(Wallpaper ...)
-	TODO: check
+	NOT-FOR-US: Wallpaper Complete Website
 CVE-2006-6214 (SQL injection vulnerability in wallpaper.php in Wallpaper
Website ...)
-	TODO: check
+	NOT-FOR-US: Wallpaper Complete Website
 CVE-2006-6213 (index.php in PEGames uses the extract function to overwrite
critical ...)
-	TODO: check
+	NOT-FOR-US: PEGames
 CVE-2006-6212 (PHP remote file inclusion vulnerability in centre.php in Site
News ...)
 	TODO: check
 CVE-2006-6211 (Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog
1.4.0 ...)
-	TODO: check
+	NOT-FOR-US: BirdBlog
 CVE-2006-6210 (SQL injection vulnerability in listpics.asp in ASP ListPics 5.0
allows ...)
-	TODO: check
+	NOT-FOR-US: ASP ListPics
 CVE-2006-6209 (Multiple SQL injection vulnerabilities in MidiCart ASP Shopping
Cart ...)
-	TODO: check
+	NOT-FOR-US: MidiCart ASP Shopping Cart
 CVE-2006-6208 (Multiple SQL injection vulnerabilities in Enthrallweb
eClassifieds ...)
-	TODO: check
+	NOT-FOR-US: Enthreallweb eClassifieds
 CVE-2006-6207 (SQL injection vulnerability in products.asp in Evolve shopping
cart ...)
-	TODO: check
+	NOT-FOR-US: Evolve Merchant
 CVE-2006-6206 (SQL injection vulnerability in item.asp in WarHound General
Shopping ...)
-	TODO: check
+	NOT-FOR-US: WarHound General Shopping Cart
 CVE-2006-6205 (Multiple cross-site scripting (XSS) vulnerabilities in
result.asp in ...)
-	TODO: check
+	NOT-FOR-US: Enthrallweb eHomes
 CVE-2006-6204 (Multiple SQL injection vulnerabilities in Enthrallweb eHomes
allow ...)
-	TODO: check
+	NOT-FOR-US: Enthrallweb eHomes
 CVE-2006-6203 (Directory traversal vulnerability in startdown.php in the
Flyspray ME ...)
 	TODO: check
 CVE-2006-6202 (PHP remote file inclusion vulnerability in
modules/NukeAI/util.php in ...)