Re: [W3af-users] CVE/CVSS-W3af compatibility

2016-11-22 Thread Andres Riancho
Waqas, Some vulnerabilities, such as SQL injection should display vulndb data [0] in the UI and some output reports. vulndb references owasp top10, and cwe. The complete list of vulnerabilities which include this description is here [1]. This is only available in the latest w3af versions. [0]

[W3af-users] CVE/CVSS-W3af compatibility

2016-11-16 Thread Waqas Aman
Hi, I just started using the tool. I was wondering whether the w3af scan results include the CVE/CVSS information of the vulnerabilities found, or information of other standard vuln.DBs/standards for the matter. I didn't see such info yet, may be I am missing it. IF not provided natively,, are ther