"""

    Wapiti does not provide ranking for the vulnerabilities it has found.
    This file tries to define a ranking for every vulnerability Wapiti might
    find.

"""


from libptp.constants import HIGH, MEDIUM, LOW, INFO


SIGNATURES = {
    # High ranked vulnerabilities
    'SQL Injection': HIGH,
    'Blind SQL Injection': HIGH,
    'Command execution': HIGH,

    # Medium ranked vulnerabilities
    'Htaccess Bypass': MEDIUM,
    'Cross Site Scripting': MEDIUM,
    'CRLF Injection': MEDIUM,

    # Low ranked vulnerabilities
    'File Handling': LOW,  # a.k.a Path or Directory listing
    'Resource consumption': LOW,  # TODO: Is this higher than LOW?

    # Informational ranked vulnerabilities
    'Backup file': INFO,
    'Potentially dangerous file': INFO,  # TODO: Is this higher than INFO?
    'Internal Server Error': INFO,
}

@@ -494,16 +494,36 @@
  MEDIUM,
+%0A    'CRLF': MEDIUM,
 %0A%0A    # 

Add one signature for wapiti 2.2.1