Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 Aug 2023 06:32:32 GMT
From:      Florian Smeets <flo@FreeBSD.org>
To:        ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org
Subject:   git: 5a4fbec7d6a9 - main - security/vuxml: add phpmyfaq < 3.1.16
Message-ID:  <202308230632.37N6WW8V029809@gitrepo.freebsd.org>

next in thread | raw e-mail | index | archive | help
The branch main has been updated by flo:

URL: https://cgit.FreeBSD.org/ports/commit/?id=5a4fbec7d6a92ca5c0232f2d798506ac337f4743

commit 5a4fbec7d6a92ca5c0232f2d798506ac337f4743
Author:     Florian Smeets <flo@FreeBSD.org>
AuthorDate: 2023-08-23 06:28:42 +0000
Commit:     Florian Smeets <flo@FreeBSD.org>
CommitDate: 2023-08-23 06:32:25 +0000

    security/vuxml: add phpmyfaq < 3.1.16
---
 security/vuxml/vuln/2023.xml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/security/vuxml/vuln/2023.xml b/security/vuxml/vuln/2023.xml
index b0135e1f951a..af7074dadc10 100644
--- a/security/vuxml/vuln/2023.xml
+++ b/security/vuxml/vuln/2023.xml
@@ -1,3 +1,33 @@
+  <vuln vid="ddd3fcc9-2bdd-11ee-9af4-589cfc0f81b0">
+    <topic>phpmyfaq -- multiple vulnerabilities</topic>
+    <affects>
+      <package>
+	<name>phpmyfaq-php80</name>
+	<name>phpmyfaq-php81</name>
+	<name>phpmyfaq-php82</name>
+	<name>phpmyfaq-php83</name>
+	<range><lt>3.1.16</lt></range>
+      </package>
+    </affects>
+    <description>
+      <body xmlns="http://www.w3.org/1999/xhtml">;
+	<p>phpmyfaq developers report:</p>
+	<blockquote cite="https://www.phpmyfaq.de/security/advisory-2023-07-16">;
+	  <p>Cross Site Scripting vulnerability</p>
+	  <p>CSV injection vulnerability</p>
+	</blockquote>
+      </body>
+    </description>
+    <references>
+      <url>https://huntr.dev/bounties/e891dcbc-2092-49d3-9518-23e37187a5ea/</url>;
+      <url>https://huntr.dev/bounties/36149a42-cbd5-445e-a371-e351c899b189/</url>;
+    </references>
+    <dates>
+      <discovery>2023-07-16</discovery>
+      <entry>2023-08-23</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="5666688f-803b-4cf0-9cb1-08c088f2225a">
     <topic>chromium -- multiple vulnerabilities</topic>
     <affects>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202308230632.37N6WW8V029809>