Author: fw Date: 2011-11-10 18:04:02 +0000 (Thu, 10 Nov 2011) New Revision: 17582 Modified: data/CVE/list Log: NFUs Modified: data/CVE/list ==================================================================--- data/CVE/list 2011-11-10 17:52:15 UTC (rev 17581) +++ data/CVE/list 2011-11-10 18:04:02 UTC (rev 17582) @@ -311,91 +311,91 @@ CVE-2010-5043 (SQL injection vulnerability in the DJ-ArtGallery (com_djartgallery) ...) NOT-FOR-US: Joomla extension CVE-2010-5042 (Cross-site scripting (XSS) vulnerability in the DJ-ArtGallery ...) - TODO: Joomla extension + NOT-FOR-US: Joomla extension CVE-2010-5041 (SQL injection vulnerability in index.php in the NP_Gallery plugin 0.94 ...) - TODO: Nucleus CMS extension + NOT-FOR-US: Nucleus CMS extension CVE-2010-5040 (PHP remote file inclusion vulnerability in ...) - TODO: Nucleus CMS extension + NOT-FOR-US: Nucleus CMS extension CVE-2010-5039 (SQL injection vulnerability in control/admin_login.php in ScriptsFeed ...) - TODO: ScriptsFeed Recipes Listing Portal + NOT-FOR-US: ScriptsFeed Recipes Listing Portal CVE-2010-5038 (PHP remote file inclusion vulnerability in contact/contact.php in ...) - TODO: Groone''s Simple Contact Form + NOT-FOR-US: Groone''s Simple Contact Form CVE-2010-5037 (SQL injection vulnerability in article.php in SenseSites CommonSense ...) - TODO: SenseSites CommonSense CMS + NOT-FOR-US: SenseSites CommonSense CMS CVE-2010-5036 (SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 ...) - TODO: iScripts eSwap + NOT-FOR-US: iScripts eSwap CVE-2010-5035 (Cross-site scripting (XSS) vulnerability in search.php in iScripts ...) - TODO: iScripts eSwap + NOT-FOR-US: iScripts eSwap CVE-2010-5034 (SQL injection vulnerability in viewhistorydetail.php in iScripts ...) - TODO: iScripts EasyBiller + NOT-FOR-US: iScripts EasyBiller CVE-2010-5033 (SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows ...) - TODO: check + NOT-FOR-US: Fusebox CVE-2010-5032 (SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component ...) - TODO: check + NOT-FOR-US: Joomla extension CVE-2010-5031 (Cross-site scripting (XSS) vulnerability in index.php in fileNice 1.1 ...) - TODO: check + NOT-FOR-US: fileNice CVE-2010-5030 (Cross-site scripting (XSS) vulnerability in index.php in Ecomat CMS ...) - TODO: check + NOT-FOR-US: Ecomat CMS CVE-2010-5029 (SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows ...) - TODO: check + NOT-FOR-US: Ecomat CMS CVE-2010-5028 (SQL injection vulnerability in the JExtensions JE Job (com_jejob) ...) - TODO: check + NOT-FOR-US: Joomla extension CVE-2010-5027 (Cross-site scripting (XSS) vulnerability in winners.php in Science ...) - TODO: check + NOT-FOR-US: Science Fair In A Box (SFIAB) CVE-2010-5026 (SQL injection vulnerability in winners.php in Science Fair In A Box ...) - TODO: check + NOT-FOR-US: Science Fair In A Box (SFIAB) CVE-2010-5025 (Cross-site scripting (XSS) vulnerability in manage/main.php in ...) - TODO: check + NOT-FOR-US: CuteSITE CMS CVE-2010-5024 (SQL injection vulnerability in manage/add_user.php in CuteSITE CMS ...) - TODO: check + NOT-FOR-US: CuteSITE CMS CVE-2010-5023 (SQL injection vulnerability in index.asp in Digital Interchange ...) - TODO: check + NOT-FOR-US: Digital Interchange Calendar CVE-2010-5022 (SQL injection vulnerability in the JExtensions JE Story Submit ...) - TODO: check + NOT-FOR-US: Joomla extension CVE-2010-5021 (SQL injection vulnerability in view_group.asp in Digital Interchange ...) - TODO: check + NOT-FOR-US: Digital Interchange Calendar CVE-2010-5020 (SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 ...) - TODO: check + NOT-FOR-US: NetArt Media iBoutique CVE-2010-5019 (SQL injection vulnerability in view_photo.php in 2daybiz Online ...) - TODO: check + NOT-FOR-US: 2daybiz Online Classified Script CVE-2010-5018 (Cross-site scripting (XSS) vulnerability in ...) - TODO: check + NOT-FOR-US: 2daybiz Online Classified Script CVE-2010-5017 (SQL injection vulnerability in stats.php in Elite Gaming Ladders 3.0 ...) - TODO: check + NOT-FOR-US: Elite Gaming Ladders CVE-2010-5016 (SQL injection vulnerability in matchdb.php in Elite Gaming Ladders 3.5 ...) - TODO: check + NOT-FOR-US: Elite Gaming Ladders CVE-2010-5015 (SQL injection vulnerability in view_photo.php in 2daybiz Network ...) - TODO: check + NOT-FOR-US: 2daybiz Network Community Script CVE-2010-5014 (SQL injection vulnerability in standings.php in Elite Gaming Ladders ...) - TODO: check + NOT-FOR-US: Elite Gaming Ladders CVE-2010-5013 (SQL injection vulnerability in listing_detail.asp in Mckenzie ...) - TODO: check + NOT-FOR-US: Mckenzie Creations Virtual Real Estate Manager CVE-2010-5012 (SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows ...) - TODO: check + NOT-FOR-US: DaLogin CVE-2010-5011 (SQL injection vulnerability in schoolmv2/html/studentmain.php in ...) - TODO: check + NOT-FOR-US: SchoolMation CVE-2010-5010 (Cross-site scripting (XSS) vulnerability in ...) - TODO: check + NOT-FOR-US: SchoolMation CVE-2010-5009 (SQL injection vulnerability in index.php in UTStats Beta 4 and earlier ...) - TODO: check + NOT-FOR-US: UTStats CVE-2010-5008 (SQL injection vulnerability in pages/contact_list_mail_form.asp in ...) - TODO: check + NOT-FOR-US: BrightSuite Groupware CVE-2010-5007 (Cross-site scripting (XSS) vulnerability in pages/match_report.php in ...) - TODO: check + NOT-FOR-US: UTStats CVE-2010-5006 (SQL injection vulnerability in googlemap/index.php in EMO Realty ...) - TODO: check + NOT-FOR-US: EMO Realty Manager CVE-2010-5005 (Cross-site scripting (XSS) vulnerability in ...) - TODO: check + NOT-FOR-US: Rayzz Photoz CVE-2010-5004 (SQL injection vulnerability in searchvote.php in 2daybiz Polls (aka ...) - TODO: check + NOT-FOR-US: 2daybiz Polls CVE-2010-5000 (SQL injection vulnerability in login/login_index.php in MCLogin System ...) - TODO: check + NOT-FOR-US: MCLogin System CVE-2010-4998 (PHP remote file inclusion vulnerability in ...) - TODO: check + NOT-FOR-US: ardeaCore PHP Framework CVE-2010-4997 (SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 ...) - TODO: check + NOT-FOR-US: OlyKit Swoopo Clone 2010 CVE-2010-4971 (Cross-site scripting (XSS) vulnerability in VideoWhisper PHP 2 Way ...) - TODO: check + NOT-FOR-US: VideoWhisper PHP 2 Way Video Chat CVE-2011-4262 RESERVED CVE-2011-4261