From b0c3f6c82ae87ef1b7e27fbffa055116b05f02a8 Mon Sep 17 00:00:00 2001
From: Peter van der Laan <vanderlaan.pm@gmail.com>
Date: Mon, 18 Nov 2013 10:19:05 +0100
Subject: [PATCH] Update theme_vulns.xml

---
 data/theme_vulns.xml | 168 +++++++++++++++++++++++++++++++++++++++----
 1 file changed, 156 insertions(+), 12 deletions(-)

diff --git a/data/theme_vulns.xml b/data/theme_vulns.xml
index 12ca9d64..83e34c29 100644
--- a/data/theme_vulns.xml
+++ b/data/theme_vulns.xml
@@ -255,8 +255,9 @@
 
   <theme name="shapeless">
     <vulnerability>
-      <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
+      <title>Shapeless - Unspecified XSS</title>
       <references>
+        <osvdb>85919</osvdb>
         <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
       </references>
       <type>XSS</type>
@@ -265,8 +266,9 @@
 
   <theme name="brisk">
     <vulnerability>
-      <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
+      <title>Brisk - Unspecified XSS</title>
       <references>
+        <osvdb>85918</osvdb>
         <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
       </references>
       <type>XSS</type>
@@ -275,8 +277,9 @@
 
   <theme name="blaze">
     <vulnerability>
-      <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
+      <title>Blaze - Unspecified XSS</title>
       <references>
+        <osvdb>85917</osvdb>
         <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
       </references>
       <type>XSS</type>
@@ -285,8 +288,9 @@
 
   <theme name="eunice">
     <vulnerability>
-      <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
+      <title>Eunice - Unspecified XSS</title>
       <references>
+        <osvdb>85916</osvdb>
         <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
       </references>
       <type>XSS</type>
@@ -295,8 +299,9 @@
 
   <theme name="explicit">
     <vulnerability>
-      <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
+      <title>Explicit - Unspecified XSS</title>
       <references>
+        <osvdb>85915</osvdb>
         <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
       </references>
       <type>XSS</type>
@@ -305,8 +310,9 @@
 
   <theme name="essence">
     <vulnerability>
-      <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
+      <title>Essence - Unspecified XSS</title>
       <references>
+        <osvdb>85914</osvdb>
         <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
       </references>
       <type>XSS</type>
@@ -315,8 +321,9 @@
 
   <theme name="paramount">
     <vulnerability>
-      <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
+      <title>Paramount - Unspecified XSS</title>
       <references>
+        <osvdb>85913</osvdb>
         <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
       </references>
       <type>XSS</type>
@@ -325,8 +332,9 @@
 
   <theme name="picturefactory">
     <vulnerability>
-      <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
+      <title>PictureFactory - Unspecified XSS</title>
       <references>
+        <osvdb>85912</osvdb>
         <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
       </references>
       <type>XSS</type>
@@ -335,8 +343,9 @@
 
   <theme name="sparky">
     <vulnerability>
-      <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
+      <title>Sparky - Unspecified XSS</title>
       <references>
+        <osvdb>85911</osvdb>
         <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
       </references>
       <type>XSS</type>
@@ -345,8 +354,9 @@
 
   <theme name="theagency">
     <vulnerability>
-      <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
+      <title>TheAgency - Unspecified XSS</title>
       <references>
+        <osvdb>85910</osvdb>
         <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
       </references>
       <type>XSS</type>
@@ -355,8 +365,9 @@
 
   <theme name="konzept">
     <vulnerability>
-      <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
+      <title>Konzept - Unspecified XSS</title>
       <references>
+        <osvdb>85920</osvdb>
         <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
       </references>
       <type>XSS</type>
@@ -365,14 +376,147 @@
 
   <theme name="daisho">
     <vulnerability>
-      <title>XSS vulnerability in multiple premium WordPress themes by Flow/Devatic</title>
+      <title>Daisho - Unspecified XSS</title>
       <references>
+        <osvdb>85921</osvdb>
         <url>http://jannefi.blogspot.fi/2012/09/xss-vulnerability-in-multiple-premium.html</url>
       </references>
       <type>XSS</type>
     </vulnerability>
   </theme>
 
+  <theme name="choices">
+    <vulnerability>
+      <title>Choices - Unspecified XSS</title>
+      <references>
+        <osvdb>86755</osvdb>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-wp-themes-by-kriesi.html</url>
+      </references>
+      <type>XSS</type>
+    </vulnerability>
+  </theme>
+
+  <theme name="brightbox">
+    <vulnerability>
+      <title>Brightbox - Unspecified XSS</title>
+      <references>
+        <osvdb>86756</osvdb>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-wp-themes-by-kriesi.html</url>
+      </references>
+      <type>XSS</type>
+    </vulnerability>
+  </theme>
+
+  <theme name="broadscope">
+    <vulnerability>
+      <title>Broadscope - Unspecified XSS</title>
+      <references>
+        <osvdb>86757</osvdb>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-wp-themes-by-kriesi.html</url>
+      </references>
+      <type>XSS</type>
+    </vulnerability>
+  </theme>
+
+  <theme name="corona">
+    <vulnerability>
+      <title>Corona - Unspecified XSS</title>
+      <references>
+        <osvdb>86758</osvdb>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-wp-themes-by-kriesi.html</url>
+      </references>
+      <type>XSS</type>
+    </vulnerability>
+  </theme>
+
+  <theme name="flashlight">
+    <vulnerability>
+      <title>Flashlight - Unspecified XSS</title>
+      <references>
+        <osvdb>86759</osvdb>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-wp-themes-by-kriesi.html</url>
+      </references>
+      <type>XSS</type>
+    </vulnerability>
+  </theme>
+
+  <theme name="coalition">
+    <vulnerability>
+      <title>Coalition - Unspecified XSS</title>
+      <references>
+        <osvdb>86760</osvdb>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-wp-themes-by-kriesi.html</url>
+      </references>
+      <type>XSS</type>
+    </vulnerability>
+  </theme>
+
+  <theme name="shoutbox">
+    <vulnerability>
+      <title>Shoutbox - Unspecified XSS</title>
+      <references>
+        <osvdb>86761</osvdb>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-wp-themes-by-kriesi.html</url>
+      </references>
+      <type>XSS</type>
+    </vulnerability>
+  </theme>
+
+  <theme name="velvet">
+    <vulnerability>
+      <title>Velvet - Unspecified XSS</title>
+      <references>
+        <osvdb>86762</osvdb>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-wp-themes-by-kriesi.html</url>
+      </references>
+      <type>XSS</type>
+    </vulnerability>
+  </theme>
+
+  <theme name="upscale">
+    <vulnerability>
+      <title>Upscale - Unspecified XSS</title>
+      <references>
+        <osvdb>86763</osvdb>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-wp-themes-by-kriesi.html</url>
+      </references>
+      <type>XSS</type>
+    </vulnerability>
+  </theme>
+
+  <theme name="expose">
+    <vulnerability>
+      <title>Expose - Unspecified XSS</title>
+      <references>
+        <osvdb>86764</osvdb>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-wp-themes-by-kriesi.html</url>
+      </references>
+      <type>XSS</type>
+    </vulnerability>
+  </theme>
+
+  <theme name="abundance">
+    <vulnerability>
+      <title>Abundance - Unspecified XSS</title>
+      <references>
+        <osvdb>86765</osvdb>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-wp-themes-by-kriesi.html</url>
+      </references>
+      <type>XSS</type>
+    </vulnerability>
+  </theme>
+
+  <theme name="eunoia">
+    <vulnerability>
+      <title>Eunoia - Unspecified XSS</title>
+      <references>
+        <osvdb>86766</osvdb>
+        <url>http://jannefi.blogspot.fi/2012/10/xss-vulnerability-in-wp-themes-by-kriesi.html</url>
+      </references>
+      <type>XSS</type>
+    </vulnerability>
+  </theme>
+
   <theme name="wise">
     <vulnerability>
       <title>Site5 Wordpress Themes Email Spoofing</title>