Author: stef-guest Date: 2007-01-28 17:54:28 +0100 (Sun, 28 Jan 2007) New Revision: 5369 Modified: data/CVE/list Log: bugnums Modified: data/CVE/list ==================================================================--- data/CVE/list 2007-01-28 16:42:32 UTC (rev 5368) +++ data/CVE/list 2007-01-28 16:54:28 UTC (rev 5369) @@ -208,7 +208,7 @@ CVE-2007-0388 (SQL injection vulnerability in search.php in Woltlab Burning Board ...) NOT-FOR-US: Woltlab Burning Board CVE-2007-0387 (SQL injection vulnerability in models/category.php in the Weblinks ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2007-0386 (Unspecified vulnerability in the rating section in PostNuke 0.764 has ...) NOT-FOR-US: PostNuke CVE-2007-0385 (The faq section in PostNuke 0.764 allows remote attackers to obtain ...) @@ -232,14 +232,14 @@ CVE-2007-0376 (Cross-site scripting (XSS) vulnerability in Virtuemart 1.0.7 allows ...) NOT-FOR-US: Virtuemart CVE-2007-0375 (Joomla! 1.5.0 Beta allows remote attackers to obtain sensitive ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2007-0374 (SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and ...) - mambo <unfixed> - - joomla <itp> + - joomla <itp> (bug #326398) NOTE: Mantainer working in new upstream version of Joomla and waiting patch NOTE: for Mambo. CVE-2007-0373 (Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2007-0372 (Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 ...) NOT-FOR-US: PHP-Nuke CVE-2007-0371 (A certain ActiveX control in the Common Controls Replacement Project ...) @@ -6575,28 +6575,28 @@ CVE-2006-4477 (Multiple PHP remote file inclusion vulnerabilities in Visual Shapers ...) NOT-FOR-US: ezContents CVE-2006-4476 (Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2006-4475 (Joomla! before 1.0.11 does not limit access to the Admin Popups ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2006-4474 (Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before ...) - - joomla <itp> + - joomla <itp> (bug #326398) NOTE: Joomla is a new package and the version 1.0.12-2 is not affected. CVE-2006-4473 (Unspecified vulnerability in com_content in Joomla! before 1.0.11, ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2006-4472 (Multiple unspecified vulnerabilities in Joomla! before 1.0.11 allow ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2006-4471 (The Admin Upload Image functionality in Joomla! before 1.0.11 allows ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2006-4470 (Joomla! before 1.0.11 omits some checks for whether _VALID_MOS is ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2006-4469 (Unspecified vulnerability in PEAR.php in Joomla! before 1.0.11 allows ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2006-4468 (Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2006-4467 (Simple Machines Forum (SMF) 1.1RCx before 1.1RC3, and 1.0.x before ...) NOT-FOR-US: Simple Machines Forum CVE-2006-4466 (Joomla! before 1.0.11 does not properly unset variables when the input ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2006-4465 (** DISPUTED ** ...) NOT-FOR-US: Microsoft CVE-2006-4464 (The Nokia Browser, possibly Nokia Symbian 60 Browser 3rd edition, ...) @@ -8888,9 +8888,9 @@ CVE-2006-3482 (Cross-site scripting (XSS) vulnerability in maillist.php in ...) NOT-FOR-US: PHPMailList CVE-2006-3481 (Multiple SQL injection vulnerabilities in Joomla! before 1.0.10 allow ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2006-3480 (Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2006-3479 (Cross-site request forgery (CSRF) vulnerability in the del_block ...) NOT-FOR-US: Nuked-Klan CVE-2006-3478 (PHP remote file inclusion vulnerability in ...) @@ -10024,7 +10024,7 @@ CVE-2006-2961 (Stack-based buffer overflow in CesarFTP 0.99g and earlier allows ...) NOT-FOR-US: CesarFTP CVE-2006-2960 (PHP remote file inclusion vulnerability in includes/joomla.php in ...) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2006-2959 (SQL injection vulnerability in inc_header.asp in Snitz Forum 3.4.05 ...) NOT-FOR-US: Snitz Forum CVE-2006-2958 (Directory traversal vulnerability in FilZip 3.05 allows remote ...) @@ -12377,10 +12377,10 @@ NOT-FOR-US: WWWThreads CVE-2006-1957 (The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows ...) - mambo 4.6.1-4 (bug #364769; medium) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2006-1956 (The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows ...) - mambo 4.6.1-4 (bug #364769; medium) - - joomla <itp> + - joomla <itp> (bug #326398) CVE-2006-1955 (PHP remote file inclusion vulnerability in authent.php4 in Nicolas ...) NOT-FOR-US: RechnungsZentrale CVE-2006-1954 (SQL injection vulnerability in authent.php4 in Nicolas Fischer (aka ...)