From 6f406fe8072d68e2115aedde38aab3bde627c955 Mon Sep 17 00:00:00 2001
From: erwanlr <erwan.lr@gmail.com>
Date: Sun, 6 Jan 2013 15:23:21 +0100
Subject: [PATCH] Sintic_gallery FPD & file upload

---
 data/plugin_vulns.xml | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index a808caed..2812d19f 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -25,12 +25,26 @@ ryandewhurst at gmail
       <title></title>
       <reference></reference>
       <type></type>
-    <vulnerability>
+    </vulnerability>
   </plugin>
 
 -->
 <vulnerabilities>
 
+  <plugin name="sintic_gallery">
+    <vulnerability>
+      <title>sintic_gallery Arbitrary File Upload Vulnerability</title>
+      <reference>http://1337day.com/exploit/19993</reference>
+      <!-- Metasploit : <reference>http://1337day.com/exploit/20065</reference> -->
+      <type>UPLOAD</type>
+    </vulnerability>
+    <vulnerability>
+      <title>sintic_gallery Path Disclosure Vulnerability</title>
+      <reference>http://1337day.com/exploit/20020</reference>
+      <type>FPD</type>
+    </vulnerability>
+  </plugin>
+
   <plugin name="wp-useronline">
     <vulnerability>
       <title>WP-UserOnline Full Path Disclosure</title>