Changeset 382

Timestamp:

04/08/2010 06:57:42 PM (3 years ago)

Author:

sullo

Message:

Add content search string and fix errors in tests

Location:

trunk/plugins

Files:

• db_content_search (modified) (1 diff)
• db_tests (modified) (1 diff)

trunk/plugins/db_content_search

@@ -24 +24 @@
 "750006","0","mssql_p?connect\(","Potential PHP MSSQL database connection string found."
 "750007","0","Call to undefined function.*\(\) in \/","PHP error reveals file system path."
+"750008","36099","FrameworkLog.xsl\"\\?>.*<version>(?:[0-2]|3\.(?:[0-5]|6\.0\.(?:[0-4]|5(?:[0-3]|4[0-5]))))","McAfee Common Management Agent 3.6.0.546 and below contain multiple overflows."

trunk/plugins/db_tests

@@ -6192 +6192 @@
 "006191","","3","/wp-app.log","GET","Array","LANG","","","","Wordpress' wp-app.log may leak application/system details.","",""
 "006192","","3","/_vti_bin/_vti_adm/admin.dll","GET","osstatus=","","","specified module could not be found","","FrontPage/SharePoint file found.","",""
-"006192","","3","/_vti_bin/_vti_adm/admin.dll","GET","osstatus=","","","specified module could not be found","","FrontPage/SharePoint file found.","",""
 "006193","58472","3","/read/rss?forum=nonexistant&rev=0.92","GET","no such element in array","","","","","Lyris ListManager error information disclosure.","",""
 "006194","58472","3","/subscribe/survey~1.tml","GET","Database error inf","","","","","Lyris ListManager error information disclosure.","",""
-"006195","58463","4","/scripts/message/message_dialog.tml?how_many_back="><script>alert(1)</script>","GET","<script>alert(1)</script>","","","","","Lyris ListManager Cross-Site Scripting.","",""
+"006195","58463","4","/scripts/message/message_dialog.tml?how_many_back=\"><script>alert(1)</script>","GET","<script>alert(1)</script>","","","","","Lyris ListManager Cross-Site Scripting.","",""
 "006196","58464","04","/read/attach_file.tml?page=http://cirt.net/","GET","action=\"http://cirt.net","","","","","Lyris ListManager XSRF/File Upload.","",""
 "006197","","23","/config/config.txt","GET","200","","","","","Configuration file found.","",""