aboutsummaryrefslogtreecommitdiffstats
path: root/security
diff options
context:
space:
mode:
authorremko <remko@FreeBSD.org>2006-08-30 20:32:07 +0800
committerremko <remko@FreeBSD.org>2006-08-30 20:32:07 +0800
commit2eb9cb323aea04a42a00d09ff57b339b825d565f (patch)
treeca82c70556b8186e462e2aa503cb52dbbf950f90 /security
parentd68f1d88c2b2be42c03a4c18356afebeab45a63a (diff)
downloadfreebsd-ports-gnome-2eb9cb323aea04a42a00d09ff57b339b825d565f.tar.gz
freebsd-ports-gnome-2eb9cb323aea04a42a00d09ff57b339b825d565f.tar.zst
freebsd-ports-gnome-2eb9cb323aea04a42a00d09ff57b339b825d565f.zip
Document joomla -- multiple vulnerabilities
Note that I only documented the high level threats, there are several others which can be found at the link provided [1] Reference: http://www.joomla.org/content/view/1841/78/ [1]
Diffstat (limited to 'security')
-rw-r--r--security/vuxml/vuln.xml30
1 files changed, 30 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml
index 81d6b822ed08..d0cdc92cea52 100644
--- a/security/vuxml/vuln.xml
+++ b/security/vuxml/vuln.xml
@@ -34,6 +34,36 @@ Note: Please add new entries to the beginning of this file.
-->
<vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">
+ <vuln vid="0ab423e7-3822-11db-81e1-000e0c2e438a">
+ <topic>joomla -- multiple vulnerabilities</topic>
+ <affects>
+ <package>
+ <name>joomla</name>
+ <range><lt>1.0.11</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>The Joomla development team reports multiple vulnerabilities
+ within the joomla application. Joomla is vulnerable to the
+ following vulnerabilities:</p>
+ <ul>
+ <li>Improper validation of the mosMail function</li>
+ <li>Improper validation of the JosIsValidEmail function.</li>
+ <li>Remote code execution in PEAR.php</li>
+ <li>Zend Hash del key or index vulnerability</li>
+ </ul>
+ </body>
+ </description>
+ <references>
+ <url>http://www.joomla.org/content/view/1841/78/</url>
+ </references>
+ <dates>
+ <discovery>2006-08-28</discovery>
+ <entry>2006-08-30</entry>
+ </dates>
+ </vuln>
+
<vuln vid="c9d2e361-32fb-11db-a6e2-000e0c2e438a">
<topic>ppp -- buffer overflow vulnerability</topic>
<affects>