Hanno Böck commited on 2019-12-13 18:21:59
Zeige 3 geänderte Dateien mit 33 Einfügungen und 60 Löschungen.
... | ... |
@@ -13,24 +13,18 @@ |
13 | 13 |
] |
14 | 14 |
}, |
15 | 15 |
{ |
16 |
- "name": "Gallery2", |
|
17 |
- "url": "http://gallery.menalto.com/", |
|
18 |
- "safe": "2.3.2", |
|
19 |
- "vuln": "CVE-2012-1113", |
|
16 |
+ "name": "Gallery", |
|
17 |
+ "url": "http://galleryproject.org/", |
|
18 |
+ "safe": "3.0.9", |
|
19 |
+ "old_safe": "2.3.2", |
|
20 |
+ "vuln": "http://galleryproject.org/gallery_3_0_9", |
|
20 | 21 |
"detection": [ |
21 | 22 |
{ |
22 | 23 |
"file": "module.inc", |
23 | 24 |
"variable": "setGalleryVersion", |
24 |
- "subdir": 2 |
|
25 |
- } |
|
26 |
- ] |
|
25 |
+ "subdir": 2, |
|
26 |
+ "note": "2.x, earlier vulnerable to CVE-2012-1113" |
|
27 | 27 |
}, |
28 |
- { |
|
29 |
- "name": "Gallery3", |
|
30 |
- "url": "http://gallery.menalto.com/", |
|
31 |
- "safe": "3.0.9", |
|
32 |
- "vuln": "http://galleryproject.org/gallery_3_0_9", |
|
33 |
- "detection": [ |
|
34 | 28 |
{ |
35 | 29 |
"file": "gallery.php", |
36 | 30 |
"variable": "const VERSION", |
... | ... |
@@ -513,6 +513,13 @@ |
513 | 513 |
"safe": "10.2.1", |
514 | 514 |
"vuln": "https://owncloud.org/security/advisories/possibility-to-extend-internal-share-permissions-using-the-api/", |
515 | 515 |
"detection": [ |
516 |
+ { |
|
517 |
+ "file": "util.php", |
|
518 |
+ "variable": "return '", |
|
519 |
+ "subdir": 1, |
|
520 |
+ "extra_match": "class OC_Util", |
|
521 |
+ "note": "5.x and earlier" |
|
522 |
+ }, |
|
516 | 523 |
{ |
517 | 524 |
"file": "version.php", |
518 | 525 |
"variable": "$OC_VersionString", |
... | ... |
@@ -521,20 +528,6 @@ |
521 | 528 |
} |
522 | 529 |
] |
523 | 530 |
}, |
524 |
- { |
|
525 |
- "name": "owncloud5", |
|
526 |
- "url": "https://owncloud.org/", |
|
527 |
- "safe": "10.2.1", |
|
528 |
- "vuln": "https://owncloud.org/security/advisories/possibility-to-extend-internal-share-permissions-using-the-api/", |
|
529 |
- "detection": [ |
|
530 |
- { |
|
531 |
- "file": "util.php", |
|
532 |
- "variable": "return '", |
|
533 |
- "subdir": 1, |
|
534 |
- "extra_match": "class OC_Util" |
|
535 |
- } |
|
536 |
- ] |
|
537 |
- }, |
|
538 | 531 |
{ |
539 | 532 |
"name": "videodb", |
540 | 533 |
"url": "http://www.videodb.net/", |
... | ... |
@@ -43,55 +43,41 @@ |
43 | 43 |
] |
44 | 44 |
}, |
45 | 45 |
{ |
46 |
- "name": "TikiWiki", |
|
47 |
- "url": "http://tikiwiki.org/", |
|
48 |
- "safe": "5.3", |
|
49 |
- "old_safe": "3.8", |
|
50 |
- "vuln": "CVE-2010-4239", |
|
51 |
- "detection": [ |
|
52 |
- { |
|
53 |
- "file": "twversion.class.php", |
|
54 |
- "variable": "$this->version", |
|
55 |
- "subdir": 2 |
|
56 |
- } |
|
57 |
- ] |
|
58 |
- }, |
|
59 |
- { |
|
60 |
- "name": "TikiWiki-old", |
|
61 |
- "url": "http://tikiwiki.org/", |
|
62 |
- "safe": "5.3", |
|
63 |
- "old_safe": "3.8", |
|
64 |
- "vuln": "CVE-2010-4239", |
|
46 |
+ "name": "Tiki", |
|
47 |
+ "url": "https://tiki.org/", |
|
48 |
+ "safe": "20.1", |
|
49 |
+ "vuln": "https://tiki.org/article464-Tiki-20-1-Released", |
|
65 | 50 |
"detection": [ |
66 | 51 |
{ |
67 | 52 |
"file": "README", |
68 | 53 |
"variable": "version", |
69 | 54 |
"subdir": 0, |
70 |
- "extra_match": "Tiki! The wiki" |
|
55 |
+ "extra_match": "Tiki! The wiki", |
|
56 |
+ "extra_nomatch": "version 2", |
|
57 |
+ "note": "1.x" |
|
58 |
+ }, |
|
59 |
+ { |
|
60 |
+ "file": "twversion.class.php", |
|
61 |
+ "variable": "$this->version", |
|
62 |
+ "subdir": 2, |
|
63 |
+ "note": "2.x and above" |
|
71 | 64 |
} |
72 | 65 |
] |
73 | 66 |
}, |
74 | 67 |
{ |
75 | 68 |
"name": "phpwiki", |
76 | 69 |
"url": "http://phpwiki.sourceforge.net/", |
77 |
- "safe": "1.3.14", |
|
78 |
- "vuln": "CVE-2007-3193", |
|
70 |
+ "safe": "", |
|
71 |
+ "vuln": "https://www.exploit-db.com/exploits/38027", |
|
79 | 72 |
"detection": [ |
80 | 73 |
{ |
81 |
- "file": "prepend.php", |
|
74 |
+ "file": "config.php", |
|
82 | 75 |
"variable": "PHPWIKI_VERSION", |
83 |
- "subdir": 1 |
|
84 |
- } |
|
85 |
- ] |
|
76 |
+ "subdir": 1, |
|
77 |
+ "note": "1.2.x" |
|
86 | 78 |
}, |
87 | 79 |
{ |
88 |
- "name": "phpwiki-legacy", |
|
89 |
- "url": "http://phpwiki.sourceforge.net/", |
|
90 |
- "safe": "1.3.14", |
|
91 |
- "vuln": "CVE-2007-3193", |
|
92 |
- "detection": [ |
|
93 |
- { |
|
94 |
- "file": "config.php", |
|
80 |
+ "file": "prepend.php", |
|
95 | 81 |
"variable": "PHPWIKI_VERSION", |
96 | 82 |
"subdir": 1 |
97 | 83 |
} |
98 | 84 |