diff options
| author | remko <remko@FreeBSD.org> | 2007-09-20 20:20:27 +0800 |
|---|---|---|
| committer | remko <remko@FreeBSD.org> | 2007-09-20 20:20:27 +0800 |
| commit | 8ca0ac491e42a182a970e19bd2e9fea6b446afc1 (patch) | |
| tree | 1eb45a6d74c3b64e512d884607cd6f0d372038b6 /security | |
| parent | a94a9f54b909bc34db8b78135fde567c2fd82d40 (diff) | |
| download | freebsd-ports-graphics-8ca0ac491e42a182a970e19bd2e9fea6b446afc1.tar.gz freebsd-ports-graphics-8ca0ac491e42a182a970e19bd2e9fea6b446afc1.tar.zst freebsd-ports-graphics-8ca0ac491e42a182a970e19bd2e9fea6b446afc1.zip | |
Document coppermine -- multiple vulnerabilities, the FreeBSD
port is already up to date.
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index c78540fe419..bd342d7ef47 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,34 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="12488805-6773-11dc-8be8-02e0185f8d72"> + <topic>coppermine -- multiple vulnerabilities</topic> + <affects> + <package> + <name>coppermine</name> + <range><lt>1.4.13</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The coppermine development team reports two vulnerabilities + with the coppermine application. These vulnerabilities are + caused by improper checking of the log variable in "viewlog.php" + and improper checking of the referer variable in "mode.php". + This could allow local file inclusion, potentially disclosing + valuable information and could lead to an attacker conducting + a cross site scripting attack against the targeted site.</p> + </body> + </description> + <references> + <url>http://coppermine-gallery.net/forum/index.php?topic=46847.0</url> + </references> + <dates> + <discovery>2007-09-14</discovery> + <entry>2007-09-20</entry> + </dates> + </vuln> + <vuln vid="e595e170-6771-11dc-8be8-02e0185f8d72"> <topic>openoffice -- arbitrary command execution vulnerability</topic> <affects> |