Date: Sun, 23 Mar 2014 23:20:44 +0000 (UTC) From: Nicola Vitale <nivit@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r348902 - head/security/vuxml Message-ID: <201403232320.s2NNKihs053339@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: nivit Date: Sun Mar 23 23:20:44 2014 New Revision: 348902 URL: http://svnweb.freebsd.org/changeset/ports/348902 QAT: https://qat.redports.org/buildarchive/r348902/ Log: - Document multiple vulnerabilities for Joomla! 2 and Joomla! 3 Modified: head/security/vuxml/vuln.xml Modified: head/security/vuxml/vuln.xml ============================================================================== --- head/security/vuxml/vuln.xml Sun Mar 23 23:16:31 2014 (r348901) +++ head/security/vuxml/vuln.xml Sun Mar 23 23:20:44 2014 (r348902) @@ -51,6 +51,49 @@ Note: Please add new entries to the beg --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1">; + <vuln vid="9fa1a0ac-b2e0-11e3-bb07-6cf0490a8c18"> + <topic>Joomla! -- Core - Multiple Vulnerabilities</topic> + <affects> + <package> + <name>joomla2</name> + <name>joomla3</name> + <range><ge>2.5.*</ge><le>2.5.18</le></range> + <range><ge>3.0.*</ge><le>3.2.2</le></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml">; + <p>The JSST and the Joomla! Security Center report:</p> + <blockquote cite="http://developer.joomla.org/security/578-20140301-core-sql-injection.html">; + <h2>[20140301] - Core - SQL Injection</h2> + <p>Inadequate escaping leads to SQL injection vulnerability.</p> + </blockquote> + <blockquote cite="http://developer.joomla.org/security/579-20140302-core-xss-vulnerability.html">; + <h2>[20140302] - Core - XSS Vulnerability</h2> + <p>Inadequate escaping leads to XSS vulnerability in com_contact.</p> + </blockquote> + <blockquote cite="http://developer.joomla.org/security/580-20140303-core-xss-vulnerability.html">; + <h2>[20140303] - Core - XSS Vulnerability</h2> + <p>Inadequate escaping leads to XSS vulnerability.</p> + </blockquote> + <blockquote cite="http://developer.joomla.org/security/581-20140304-core-unauthorised-logins.html">; + <h2>[20140304] - Core - Unauthorised Logins</h2> + <p>Inadequate checking allowed unauthorised logins via GMail authentication.</p> + </blockquote> + </body> + </description> + <references> + <url>http://developer.joomla.org/security/578-20140301-core-sql-injection.html</url>; + <url>http://developer.joomla.org/security/579-20140302-core-xss-vulnerability.html</url>; + <url>http://developer.joomla.org/security/580-20140303-core-xss-vulnerability.html</url>; + <url>http://developer.joomla.org/security/581-20140304-core-unauthorised-logins.html</url>; + </references> + <dates> + <discovery>2014-03-01</discovery> + <entry>2014-03-23</entry> + </dates> + </vuln> + <vuln vid="36f9ac43-b2ac-11e3-8752-080027ef73ec"> <topic>mail/trojita -- may leak mail contents (not user credentials) over unencrypted connection</topic> <affects>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201403232320.s2NNKihs053339>