merge more multidetections
Hanno Böck

Hanno Böck commited on 2019-12-13 18:21:59
Zeige 3 geänderte Dateien mit 33 Einfügungen und 60 Löschungen.

... ...
@@ -13,24 +13,18 @@
13 13
     ]
14 14
   },
15 15
   {
16
-    "name": "Gallery2",
17
-    "url": "http://gallery.menalto.com/",
18
-    "safe": "2.3.2",
19
-    "vuln": "CVE-2012-1113",
16
+    "name": "Gallery",
17
+    "url": "http://galleryproject.org/",
18
+    "safe": "3.0.9",
19
+    "old_safe": "2.3.2",
20
+    "vuln": "http://galleryproject.org/gallery_3_0_9",
20 21
     "detection": [
21 22
       {
22 23
         "file": "module.inc",
23 24
         "variable": "setGalleryVersion",
24
-        "subdir": 2
25
-      }
26
-    ]
25
+        "subdir": 2,
26
+        "note": "2.x, earlier vulnerable to CVE-2012-1113"
27 27
       },
28
-  {
29
-    "name": "Gallery3",
30
-    "url": "http://gallery.menalto.com/",
31
-    "safe": "3.0.9",
32
-    "vuln": "http://galleryproject.org/gallery_3_0_9",
33
-    "detection": [
34 28
       {
35 29
         "file": "gallery.php",
36 30
         "variable": "const VERSION",
... ...
@@ -513,6 +513,13 @@
513 513
     "safe": "10.2.1",
514 514
     "vuln": "https://owncloud.org/security/advisories/possibility-to-extend-internal-share-permissions-using-the-api/",
515 515
     "detection": [
516
+      {
517
+        "file": "util.php",
518
+        "variable": "return '",
519
+        "subdir": 1,
520
+        "extra_match": "class OC_Util",
521
+        "note": "5.x and earlier"
522
+      },
516 523
       {
517 524
         "file": "version.php",
518 525
         "variable": "$OC_VersionString",
... ...
@@ -521,20 +528,6 @@
521 528
       }
522 529
     ]
523 530
   },
524
-  {
525
-    "name": "owncloud5",
526
-    "url": "https://owncloud.org/",
527
-    "safe": "10.2.1",
528
-    "vuln": "https://owncloud.org/security/advisories/possibility-to-extend-internal-share-permissions-using-the-api/",
529
-    "detection": [
530
-      {
531
-        "file": "util.php",
532
-        "variable": "return '",
533
-        "subdir": 1,
534
-        "extra_match": "class OC_Util"
535
-      }
536
-    ]
537
-  },
538 531
   {
539 532
     "name": "videodb",
540 533
     "url": "http://www.videodb.net/",
... ...
@@ -43,55 +43,41 @@
43 43
     ]
44 44
   },
45 45
   {
46
-    "name": "TikiWiki",
47
-    "url": "http://tikiwiki.org/",
48
-    "safe": "5.3",
49
-    "old_safe": "3.8",
50
-    "vuln": "CVE-2010-4239",
51
-    "detection": [
52
-      {
53
-        "file": "twversion.class.php",
54
-        "variable": "$this->version",
55
-        "subdir": 2
56
-      }
57
-    ]
58
-  },
59
-  {
60
-    "name": "TikiWiki-old",
61
-    "url": "http://tikiwiki.org/",
62
-    "safe": "5.3",
63
-    "old_safe": "3.8",
64
-    "vuln": "CVE-2010-4239",
46
+    "name": "Tiki",
47
+    "url": "https://tiki.org/",
48
+    "safe": "20.1",
49
+    "vuln": "https://tiki.org/article464-Tiki-20-1-Released",
65 50
     "detection": [
66 51
       {
67 52
         "file": "README",
68 53
         "variable": "version",
69 54
         "subdir": 0,
70
-        "extra_match": "Tiki! The wiki"
55
+        "extra_match": "Tiki! The wiki",
56
+        "extra_nomatch": "version 2",
57
+        "note": "1.x"
58
+      },
59
+      {
60
+        "file": "twversion.class.php",
61
+        "variable": "$this->version",
62
+        "subdir": 2,
63
+        "note": "2.x and above"
71 64
       }
72 65
     ]
73 66
   },
74 67
   {
75 68
     "name": "phpwiki",
76 69
     "url": "http://phpwiki.sourceforge.net/",
77
-    "safe": "1.3.14",
78
-    "vuln": "CVE-2007-3193",
70
+    "safe": "",
71
+    "vuln": "https://www.exploit-db.com/exploits/38027",
79 72
     "detection": [
80 73
       {
81
-        "file": "prepend.php",
74
+        "file": "config.php",
82 75
         "variable": "PHPWIKI_VERSION",
83
-        "subdir": 1
84
-      }
85
-    ]
76
+        "subdir": 1,
77
+        "note": "1.2.x"
86 78
       },
87 79
       {
88
-    "name": "phpwiki-legacy",
89
-    "url": "http://phpwiki.sourceforge.net/",
90
-    "safe": "1.3.14",
91
-    "vuln": "CVE-2007-3193",
92
-    "detection": [
93
-      {
94
-        "file": "config.php",
80
+        "file": "prepend.php",
95 81
         "variable": "PHPWIKI_VERSION",
96 82
         "subdir": 1
97 83
       }
98 84