merge detections for punbb and vanillaforums, update
Hanno Böck

Hanno Böck commited on 2019-12-12 18:45:05
Zeige 1 geänderte Dateien mit 19 Einfügungen und 26 Löschungen.

... ...
@@ -30,10 +30,16 @@
30 30
   },
31 31
   {
32 32
     "name": "PunBB",
33
-    "url": "http://punbb.org/",
33
+    "url": "http://punbb.informer.com/",
34 34
     "safe": "1.4.1",
35 35
     "vuln": "https://secunia.com/advisories/46864",
36 36
     "detection": [
37
+      {
38
+        "file": "install.php",
39
+        "variable": "$punbb_version",
40
+        "subdir": 0,
41
+        "note": "1.2.x and earlier"
42
+      },
37 43
       {
38 44
         "file": "db_update.php",
39 45
         "variable": "UPDATE_TO",
... ...
@@ -42,19 +48,6 @@
42 48
       }
43 49
     ]
44 50
   },
45
-  {
46
-    "name": "PunBB12",
47
-    "url": "http://punbb.org/",
48
-    "safe": "1.4.1",
49
-    "vuln": "https://secunia.com/advisories/46864",
50
-    "detection": [
51
-      {
52
-        "file": "install.php",
53
-        "variable": "$punbb_version",
54
-        "subdir": 0
55
-      }
56
-    ]
57
-  },
58 51
   {
59 52
     "name": "UseBB",
60 53
     "url": "http://www.usebb.net/",
... ...
@@ -71,28 +64,28 @@
71 64
   },
72 65
   {
73 66
     "name": "Vanilla",
74
-    "url": "http://vanillaforums.com/",
75
-    "safe": "2.1.3",
76
-    "vuln": "http://vanillaforums.org/discussion/27822/vanilla-2-1-3-security-release",
67
+    "url": "https://vanillaforums.com/",
68
+    "safe": "3.2",
69
+    "vuln": "https://open.vanillaforums.com/discussion/37556/vanilla-3-2-is-now-available",
77 70
     "detection": [
78 71
       {
79 72
         "file": "version.php",
80 73
         "variable": "APPLICATION_VERSION",
81 74
         "subdir": 1,
82
-        "extra_match": "define('APPLICATION', 'Vanilla');"
83
-      }
84
-    ]
75
+        "extra_match": "define('APPLICATION', 'Vanilla');",
76
+        "note": "1.x"
85 77
       },
86
-  {
87
-    "name": "Vanilla2",
88
-    "url": "http://vanillaforums.com/",
89
-    "safe": "2.1.3",
90
-    "vuln": "http://vanillaforums.org/discussion/27822/vanilla-2-1-3-security-release",
91
-    "detection": [
92 78
       {
93 79
         "file": "index.php",
94 80
         "variable": "APPLICATION_VERSION",
95 81
         "subdir": 0,
82
+        "extra_match": "define('APPLICATION', 'Vanilla');",
83
+        "note": "2.x"
84
+      },
85
+      {
86
+        "file": "environment.php",
87
+        "variable": "APPLICATION_VERSION",
88
+        "subdir": 0,
96 89
         "extra_match": "define('APPLICATION', 'Vanilla');"
97 90
       }
98 91
     ]
99 92