Secure testing commits - Dec 2008 - r10744 - data/CVE

Author: white
Date: 2008-12-20 17:22:17 +0000 (Sat, 20 Dec 2008)
New Revision: 10744

Modified:
   data/CVE/list
Log:
More NFUs

Modified: data/CVE/list
==================================================================---
data/CVE/list	2008-12-20 17:11:40 UTC (rev 10743)
+++ data/CVE/list	2008-12-20 17:22:17 UTC (rev 10744)
@@ -41,65 +41,65 @@
 CVE-2008-5656 (Cross-site scripting (XSS) vulnerability in the frontend plugin
for ...)
 	TODO: check
 CVE-2008-5655 (Multiple SQL injection vulnerabilities in MyioSoft
EasyBookMarker 4.0 ...)
-	TODO: check
+	NOT-FOR-US: MyioSoft EasyBookMarker
 CVE-2008-5654 (SQL injection vulnerability in the loginADP function in
ajaxp.php in ...)
-	TODO: check
+	NOT-FOR-US: MyioSoft EasyBookMarker
 CVE-2008-5653 (SQL injection vulnerability in the loginADP function in
ajaxp.php in ...)
-	TODO: check
+	NOT-FOR-US: MyioSoft EasyBookMarker
 CVE-2008-5652 (SQL injection vulnerability in the loginADP function in
ajaxp.php in ...)
-	TODO: check
+	NOT-FOR-US: MyioSoft EasyBookMarker
 CVE-2008-5651 (SQL injection vulnerability in ...)
-	TODO: check
+	NOT-FOR-US: MyioSoft EasyBookMarker
 CVE-2008-5650 (SQL injection vulnerability in the login directory in AlstraSoft
Web ...)
-	TODO: check
+	NOT-FOR-US: AlstraSoft Web Host Directory
 CVE-2008-5649 (SQL injection vulnerability in admin/admin.php in AlstraSoft
Article ...)
-	TODO: check
+	NOT-FOR-US: AlstraSoft Web Host Directory
 CVE-2008-5648 (SQL injection vulnerability in admin/login.php in DeltaScripts
PHP ...)
-	TODO: check
+	NOT-FOR-US: DeltaScripts PHP Shop
 CVE-2008-5647 (Unspecified vulnerability in the HTML sanitizer filter in Trac
before ...)
 	TODO: check
 CVE-2008-5646 (Unspecified vulnerability in Trac before 0.11.2 allows attackers
to ...)
 	TODO: check
 CVE-2008-5645 (Directory traversal vulnerability in the media server in Orb
Networks ...)
-	TODO: check
+	NOT-FOR-US: Orb Networks Orb
 CVE-2008-5644 (Cross-site scripting (XSS) vulnerability in the file backend
module in ...)
 	TODO: check
 CVE-2008-5643 (SQL injection vulnerability in the Books (com_books) component
for ...)
-	TODO: check
+	NOT-FOR-US: Joomla
 CVE-2008-5642 (Directory traversal vulnerability in admin/login.php in CMS Made
...)
-	TODO: check
+	NOT-FOR-US: CMS Made Simple
 CVE-2008-5641 (SQL injection vulnerability in account.asp in Active Photo
Gallery 6.2 ...)
-	TODO: check
+	NOT-FOR-US: Active Photo Gallery
 CVE-2008-5640 (SQL injection vulnerability in bidhistory.asp in Active Bids 3.5
...)
-	TODO: check
+	NOT-FOR-US: Active Bids
 CVE-2008-5639 (Directory traversal vulnerability in index.php in TxtBlog 1.0
Alpha ...)
-	TODO: check
+	NOT-FOR-US: TxtBlog
 CVE-2008-5638 (Multiple SQL injection vulnerabilities in Active Price
Comparison 4 ...)
-	TODO: check
+	NOT-FOR-US: Active Price Comparison
 CVE-2008-5637 (SQL injection vulnerability in blog.asp in ParsBlogger (Pb)
allows ...)
-	TODO: check
+	NOT-FOR-US: ParsBlogger
 CVE-2008-5636 (SQL injection vulnerability in cate.php in Lito Lite CMS, when
...)
-	TODO: check
+	NOT-FOR-US: Lito Lite CMS
 CVE-2008-5635 (SQL injection vulnerability in account.asp in Active Membership
2.0 ...)
-	TODO: check
+	NOT-FOR-US: Active Membership
 CVE-2008-5634 (SQL injection vulnerability in account.asp in Active Force
Matrix 2.0 ...)
-	TODO: check
+	NOT-FOR-US: Active Force Matrix
 CVE-2008-5633 (SQL injection vulnerability in register.asp in ActiveVotes 2.2
allows ...)
-	TODO: check
+	NOT-FOR-US: ActiveVotes
 CVE-2008-5632 (SQL injection vulnerability in Account.asp in Active Time
Billing 3.2 ...)
-	TODO: check
+	NOT-FOR-US: Active Time Billing
 CVE-2008-5631 (SQL injection vulnerability in start.asp in Active eWebquiz 8.0
allows ...)
-	TODO: check
+	NOT-FOR-US: Active eWebquiz
 CVE-2008-5630 (SQL injection vulnerability in merchants/index.php in Post
Affiliate ...)
-	TODO: check
+	NOT-FOR-US: Post Affiliate
 CVE-2008-5629 (SQL injection vulnerability in index.php in Turnkey Arcade
Script ...)
 	NOT-FOR-US: Turnkey Arcade Script
 CVE-2008-5628 (SQL injection vulnerability in index.php in CMS little 0.0.1
allows ...)
 	TODO: check
 CVE-2008-5627 (SQL injection vulnerability in account.asp in Active Trade 2
allows ...)
-	TODO: check
+	NOT-FOR-US: Active Trade
 CVE-2008-5626 (XM Easy Personal FTP Server 5.6.0 allows remote authenticated
users to ...)
-	TODO: check
+	NOT-FOR-US: XM Easy Personal FTP Server
 CVE-2008-5623
 	RESERVED
 CVE-2008-5620 (RoundCube Webmail (roundcubemail) before 0.2-beta allows remote
...)