diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml index 8debb1f4..1b9b935f 100644 --- a/data/plugin_vulns.xml +++ b/data/plugin_vulns.xml @@ -1353,9 +1353,7 @@ - Auctions 2.0.1.3 - Arbitrary - File Upload Vulnerability - + Auctions 2.0.1.3 - Arbitrary File Upload Vulnerability http://packetstormsecurity.com/files/113568/ @@ -5193,8 +5191,7 @@ - XVE Various Embed - JW Player Multiple Cross-Site Scripting Vulnerabilities - + XVE Various Embed - JW Player Multiple Cross-Site Scripting Vulnerabilities 50173 @@ -6695,8 +6692,7 @@ - BuddyPress Extended Friendship Request - wp-admin/admin-ajax.php friendship_request_message Parameter XSS - + BuddyPress Extended Friendship Request - wp-admin/admin-ajax.php friendship_request_message Parameter XSS 94807 @@ -7390,7 +7386,7 @@ - Landing Pages - Unspecified SQL Injection + Landing Pages - Unspecified SQL Injection 98334 55192 @@ -7784,4 +7780,16 @@ + + + Rockhoist Ratings 1.2.2 - wp-admin/admin-ajax.php postID Parameter SQL Injection + + 99195 + 55445 + http://www.securityfocus.com/bid/63441 + + SQLI + + + diff --git a/data/wp_vulns.xml b/data/wp_vulns.xml index 4d6bfe14..45ea1596 100644 --- a/data/wp_vulns.xml +++ b/data/wp_vulns.xml @@ -26,6 +26,7 @@ http://core.trac.wordpress.org/changeset/25322 XSS + 3.6.1 Crafted String URL Redirect Restriction Bypass @@ -57,6 +58,7 @@ http://core.trac.wordpress.org/changeset/25322 XSS + 3.6.1 diff --git a/lib/common/models/vulnerability/output.rb b/lib/common/models/vulnerability/output.rb index a910cb1d..1a71051b 100644 --- a/lib/common/models/vulnerability/output.rb +++ b/lib/common/models/vulnerability/output.rb @@ -14,7 +14,9 @@ class Vulnerability puts ' | ' + red("* Reference: #{url}") if url end end - end - + if !fixed_in.empty? + puts " | * Fixed in: #{fixed_in}" + end + end end end