diff options
| author | glarkin <glarkin@FreeBSD.org> | 2010-07-22 06:25:34 +0800 |
|---|---|---|
| committer | glarkin <glarkin@FreeBSD.org> | 2010-07-22 06:25:34 +0800 |
| commit | 10564095cc3923c4bcb9a393b0153cac098de5ad (patch) | |
| tree | 9436b2df78c74027b4ca3d75d9dc77c7eff92a2d /security | |
| parent | cf8bf24ad6569bb789fe94480486879a92eeb2fe (diff) | |
| download | freebsd-ports-gnome-10564095cc3923c4bcb9a393b0153cac098de5ad.tar.gz freebsd-ports-gnome-10564095cc3923c4bcb9a393b0153cac098de5ad.tar.zst freebsd-ports-gnome-10564095cc3923c4bcb9a393b0153cac098de5ad.zip | |
- Document www/codeigniter file upload class vulnerability
Approved by: secteam (timeout - 1 week)
Security: http://codeigniter.com/news/codeigniter_1.7.2_security_patch/
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 6fe763495eed..c019b3a138b9 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,35 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="0502c1cb-8f81-11df-a0bb-0050568452ac"> + <topic>codeigniter -- file upload class vulnerability</topic> + <affects> + <package> + <name>codeigniter</name> + <range><lt>1.7.2_1</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Derek Jones reports:</p> + <blockquote cite="http://codeigniter.com/news/codeigniter_1.7.2_security_patch/"> + <p>A fix has been implemented for a security flaw in + CodeIgniter 1.7.2. All applications using the File + Upload class should install the patch to ensure that + their application is not subject to a vulnerability.</p> + </blockquote> + </body> + </description> + <references> + <url>http://codeigniter.com/news/codeigniter_1.7.2_security_patch/</url> + <url>http://www.phpframeworks.com/news/p/16365/codeigniter-1-7-2-security-patch</url> + </references> + <dates> + <discovery>2010-07-12</discovery> + <entry>2010-07-21</entry> + </dates> + </vuln> + <vuln vid="8c2ea875-9499-11df-8e32-000f20797ede"> <topic>mozilla -- multiple vulnerabilities</topic> <affects> |