Fix #252 Events Calendar references (& XSS Added)

2013-08-02 15:27:57 +02:00
parent c3b9611f76
commit a242ca094e
1 changed files with 7 additions and 0 deletions
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -2296,9 +2296,16 @@
    <vulnerability>
      <title>Events SQL Injection Vulnerability</title>
      <reference>http://www.exploit-db.com/exploits/10929/</reference>
+      <reference>http://osvdb.org/95677</reference>
      <type>SQLI</type>
      <fixed_in>6.7.10</fixed_in>
    </vulnerability>
+    <vulnerability>
+      <title>WP Events Calendar wp-admin/admin.php EC_id Parameter XSS</title>
+      <reference>http://osvdb.org/74705</reference>
+      <type>XSS</type>
+      <fixed_in>6.7.12a</fixed_in>
+    </vulnerability>
  </plugin>

  <plugin name="ImageManager">