Secure testing commits - Oct 2008 - r10174 - data/CVE

Author: white
Date: 2008-10-27 08:47:00 +0000 (Mon, 27 Oct 2008)
New Revision: 10174

Modified:
   data/CVE/list
Log:
typo3 modules are NFU; XOOPS NFU

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-10-27 08:37:18 UTC (rev 10173)
+++ data/CVE/list	2008-10-27 08:47:00 UTC (rev 10174)
@@ -169,21 +169,21 @@
 CVE-2008-4662 (Directory traversal vulnerability in admin.php in LokiCMS 0.3.4,
when ...)
 	NOT-FOR-US: LokiCMS
 CVE-2008-4661 (Cross-site scripting (XSS) vulnerability in the Page
Improvements ...)
-	TODO: check
+	NOT-FOR-US: Page Improvements module for typo3
 CVE-2008-4660 (SQL injection vulnerability in the M1 Intern (m1_intern) 1.0.0
...)
-	TODO: check
+	NOT-FOR-US: M1 Intern module for typo3
 CVE-2008-4659 (SQL injection vulnerability in the Mannschaftsliste ...)
-	TODO: check
+	NOT-FOR-US: Mannschaftsliste module for typo3
 CVE-2008-4658 (SQL injection vulnerability in the JobControl (dmmjobcontrol)
1.15.4 ...)
-	TODO: check
+	NOT-FOR-US: JobControl module for typo3
 CVE-2008-4657 (SQL injection vulnerability in the Econda Plugin (econda) 0.0.2
and ...)
-	TODO: check
+	NOT-FOR-US: Econda plugin for typo3
 CVE-2008-4656 (SQL injection vulnerability in the Frontend Users View
(feusersview) ...)
-	TODO: check
+	NOT-FOR-US: Frontend Users View module for typo3
 CVE-2008-4655 (SQL injection vulnerability in the Simple survey (simplesurvey)
1.7.0 ...)
-	TODO: check
+	NOT-FOR-US: Simple survey module for typo3
 CVE-2008-4653 (SQL injection vulnerability in makale.php in Makale 0.26 and
possibly ...)
-	TODO: check
+	NOT-FOR-US: XOOPS module
 CVE-2008-4652 (Buffer overflow in the ActiveX control (DartFtp.dll) in Dart
...)
 	NOT-FOR-US: Dart Communications PowerTCP FTP
 CVE-2008-4651 (Multiple SQL injection vulnerabilities in Jetbox CMS 2.1 allow
remote ...)