CVE request: Fat Free CRM multiple vulnerabilities

[Henri Salo <henri () nerv fi>]

Can I get four 2013 CVE identifiers for following Fat Free CRM issues, thanks.

Advisory:
http://www.phenoelit.org/stuff/ffcrm.txt
http://seclists.org/fulldisclosure/2013/Dec/199

Notification to vendor:
https://github.com/fatfreecrm/fat_free_crm/issues/300

New versions 0.13.0 and 0.12.1 released:
https://github.com/fatfreecrm/fat_free_crm/wiki/Fixing-security-vulnerabilities-%2827th-Dec-2013%29

Issues:
1. Known Session Secret
2. Lack of CSRF Protection
3. Default to_json for models
4. Multiple SQL Injections

---
Henri Salo

Attachment: signature.asc
Description: Digital signature