From a69cb4f4c29f527c36fe54fbe8cec899bc88e01e Mon Sep 17 00:00:00 2001
From: erwanlr <erwan.lr@gmail.com>
Date: Thu, 3 Jul 2014 10:05:33 +0200
Subject: [PATCH] Fixes #515 - theme-my-login LFI added

---
 data/plugin_vulns.xml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/data/plugin_vulns.xml b/data/plugin_vulns.xml
index 9443b56a..33a44918 100644
--- a/data/plugin_vulns.xml
+++ b/data/plugin_vulns.xml
@@ -3,6 +3,17 @@
 <vulnerabilities xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                  xsi:noNamespaceSchemaLocation="vuln.xsd">
 
+  <plugin name="theme-my-login">
+    <vulnerability>
+      <title>Theme My Login 6.3.9 - Local File Inclusion</title>
+      <references>
+        <url>http://seclists.org/fulldisclosure/2014/Jun/172</url>
+      </references>
+      <type>LFI</type>
+      <fixed_in>6.3.10</fixed_in>
+    </vulnerability>
+  </plugin>
+
   <plugin name="login-rebuilder">
     <vulnerability>
       <title>Login Rebuilder &lt; 1.2.0 - Cross Site Request Forgery Vulnerability</title>