Author: nion Date: 2008-06-22 13:04:34 +0000 (Sun, 22 Jun 2008) New Revision: 9120 Modified: data/CVE/list Log: NFUs new horde/kronolith issue Modified: data/CVE/list ==================================================================--- data/CVE/list 2008-06-22 09:14:36 UTC (rev 9119) +++ data/CVE/list 2008-06-22 13:04:34 UTC (rev 9120) @@ -10,71 +10,74 @@ CVE-2008-2785 (Unspecified vulnerability in Firefox 3.0 and 2.0.x has unknown impact ...) TODO: check CVE-2008-2784 (The smtp_filter function in spamdyke before 3.1.8 does not filter RCPT ...) - TODO: check + NOT-FOR-US: spamdyke CVE-2008-2783 (Multiple cross-site scripting (XSS) vulnerabilities in Horde ...) - TODO: check + - kronolith2 <unfixed> + - horde3 <unfixed> + NOTE: marked as unfixed for now + NOTE: poked maintainer, for details CVE-2008-2782 (Multiple directory traversal vulnerabilities in OtomiGenX 2.2 allow ...) - TODO: check + NOT-FOR-US: OtomiGenX CVE-2008-2781 (SQL injection vulnerability in index.php in DZOIC Handshakes 3.5 ...) - TODO: check + NOT-FOR-US: DZOIC Handshakes CVE-2008-2780 (The Anubis (aka Anubis+Ripe160) plugin before 1.3 for encrypt stores ...) - TODO: check + NOT-FOR-US: Anubis CVE-2008-2779 (Directory traversal vulnerability in GlobalSCAPE CuteFTP Home 8.2.0 ...) - TODO: check + NOT-FOR-US: GlobalSCAPE CuteFTP Home CVE-2008-2778 (SQL injection vulnerability in inc/class_search.php in the Search ...) - TODO: check + NOT-FOR-US: RevokeBB CVE-2008-2777 (Cross-site scripting (XSS) vulnerability in Ortro before 1.3.1 allows ...) - TODO: check + NOT-FOR-US: Ortro CVE-2008-2776 (Cross-site scripting (XSS) vulnerability in search.asp in DT ...) - TODO: check + NOT-FOR-US: DT Centrepiece CVE-2008-2775 (SQL injection vulnerability in search.asp in DT Centrepiece 4.0 allows ...) - TODO: check + NOT-FOR-US: DT Centrepiece CVE-2008-2774 (SQL injection vulnerability in item.php in CartKeeper CKGold Shopping ...) - TODO: check + NOT-FOR-US: CartKeeper CKGold Shopping Cart CVE-2008-2773 (Cross-site scripting (XSS) vulnerability in the Taxonomy Image module ...) - TODO: check + NOT-FOR-US: Taxonomy Image module for Drupal CVE-2008-2772 (The Magic Tabs module 5.x before 5.x-1.1 for Drupal allows remote ...) - TODO: check + NOT-FOR-US: Magic Tabs module for Drupal CVE-2008-2771 (The Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 ...) - TODO: check + NOT-FOR-US: Node Hierarchy module for Drupal CVE-2008-2770 (SQL injection vulnerability in index.php in MycroCMS 0.5, when ...) - TODO: check + NOT-FOR-US: MycroCMS CVE-2008-2769 (PHP remote file inclusion vulnerability in ...) - TODO: check + NOT-FOR-US: phpRaider CVE-2008-2768 (Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla ...) - TODO: check + NOT-FOR-US: Xigla Poll Manager XE CVE-2008-2767 (SQL injection vulnerability in search.asp in Xigla Poll Manager XE ...) - TODO: check + NOT-FOR-US: Xigla Poll Manager XE CVE-2008-2766 (Cross-site scripting (XSS) vulnerability in Xigla Absolute Image ...) - TODO: check + NOT-FOR-US: Xigla Absolute Image Gallery XE CVE-2008-2765 (SQL injection vulnerability in gallery.asp in Xigla Absolute Image ...) - TODO: check + NOT-FOR-US: Xigla Absolute Image Gallery XE CVE-2008-2764 (Cross-site scripting (XSS) vulnerability in admin/search.asp in Xigla ...) - TODO: check + NOT-FOR-US: Xigla Absolute Live Support XE CVE-2008-2763 (SQL injection vulnerability in search.asp in Xigla Absolute Live ...) - TODO: check + NOT-FOR-US: Xigla Absolute Live Support XE CVE-2008-2762 (SQL injection vulnerability in search.asp in Xigla Absolute Form ...) - TODO: check + NOT-FOR-US: Xigla Absolute Form Processor XE CVE-2008-2761 (Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute ...) - TODO: check + NOT-FOR-US: Xigla Absolute Banner Manager XE CVE-2008-2760 (SQL injection vulnerability in searchbanners.asp in Xigla Absolute ...) - TODO: check + NOT-FOR-US: Xigla Absolute Banner Manager XE CVE-2008-2759 (Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute ...) - TODO: check + NOT-FOR-US: Xigla Absolute Form Processor XE CVE-2008-2758 (Multiple cross-site scripting (XSS) vulnerabilities in Xigla Absolute ...) - TODO: check + NOT-FOR-US: Xigla Absolute News Manager XE CVE-2008-2757 (SQL injection vulnerability in search.asp in Xigla Absolute News ...) - TODO: check + NOT-FOR-US: Xigla Absolute News Manager XE CVE-2008-2756 (Cross-site scripting (XSS) vulnerability in admin/users.asp in Xigla ...) - TODO: check + NOT-FOR-US: Xigla Absolute Control Panel XE CVE-2008-2755 (SQL injection vulnerability in index.php in JAMM CMS allows remote ...) - TODO: check + NOT-FOR-US: JAMM CMS CVE-2008-2754 (SQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, ...) - TODO: check + NOT-FOR-US: eFiction CVE-2008-2753 (Multiple SQL injection vulnerabilities in Pooya Site Builder (PSB) 6.0 ...) - TODO: check + NOT-FOR-US: Pooya Site Builder CVE-2008-2752 (Microsoft Word 2000 9.0.2812 and 2003 11.8106.8172 does not properly ...) - TODO: check + NOT-FOR-US: Microsoft Word CVE-2008-2751 (Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish ...) TODO: check CVE-2008-2750 (The pppol2tp_recvmsg function in drivers/net/pppol2tp.c in the Linux ...)