diff options
| author | miwi <miwi@FreeBSD.org> | 2006-07-01 06:48:34 +0800 |
|---|---|---|
| committer | miwi <miwi@FreeBSD.org> | 2006-07-01 06:48:34 +0800 |
| commit | 8d817182b020af03ff5eb892bb94f2feb8f6f786 (patch) | |
| tree | 084165a24b52a3b2b64ae07e99b8df34ef2e9aa3 /security/vuxml | |
| parent | 997e384aa8c9b740d08324812bef010b1547073b (diff) | |
| download | freebsd-ports-graphics-8d817182b020af03ff5eb892bb94f2feb8f6f786.tar.gz freebsd-ports-graphics-8d817182b020af03ff5eb892bb94f2feb8f6f786.tar.zst freebsd-ports-graphics-8d817182b020af03ff5eb892bb94f2feb8f6f786.zip | |
Document joomla -- multiple vulnerabilities
Approved by: markus (co mentor)
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 40 |
1 files changed, 40 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index af97bfe61c9..93796d647a1 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,46 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="1f935f61-075d-11db-822b-728b50d539a3"> + <topic>Joomla -- multiple vulnerabilities</topic> + <affects> + <package> + <name>joomla</name> + <range><lt>1.0.10</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Joomla Site reports:</p> + <blockquote cite="http://www.joomla.org/content/view/1510/74/"> + <ul> + <li>Secured "Remember Me" functionality against SQL injection + attacks</li> + <li>Secured "Related Items" module against SQL injection + attacks</li> + <li>Secured "Weblinks" submission against SQL injection + attacks</li> + <li>Secured SEF from XSS vulnerability</li> + <li>Hardened frontend submission forms against spoofing</li> + <li>Secured mosmsg from misuse</li> + <li>Hardened mosgetparam by setting variable type to integer if + default value is detected as numeric</li> + <li>Secured com_messages from XSS vulnerability</li> + <li>Secured getUserStateFromRequest() from XSS vulnerability</li> + </ul> + </blockquote> + </body> + </description> + <references> + <url>http://secunia.com/advisories/20746/</url> + <url>http://www.joomla.org/content/view/1510/74/</url> + </references> + <dates> + <discovery>2006-06-26</discovery> + <entry>2006-06-30</entry> + </dates> + </vuln> + <vuln vid="2be7c122-0614-11db-9156-000e0c2e438a"> <topic>hashcash -- heap overflow vulnerability</topic> <affects> |