Web applications security vulnerabilities (PHP, ASP, CGI, Perl, etc) updated since 05.09.2005
Published:		10.09.2005
Source:
SecurityVulns ID:		5174
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHPNUKE : PHP-Nuke 7.6
		PBLANG : PBLang 4.65
		MYBLOGGIE : myBloggie 2.1
		MYBB : MyBB 1.0
		SAWMILL : Sawmill 7.1
		CLASS1 : Class-1 0.24
		COURIER : SqWebMail 5.0
		GUPPY : Guppy 4.5
		PHPCOMMUNITYCALE : phpCommunityCalendar 4.0
		AMEMBER : aMember Pro 2.3
		MAN2WEB : man2web 0.88
		STYLEMOTION : WEB//NEWS 1.4
		CHITTA : mimic2 0.86
		IPSWITCH : Whatsup Gold 8.04
		IPSWITCH : Whatsup small Business 2004
		UNCLASSIFIED : Unclassified NewsBoard 1.5
		MAXDEV : MD-Pro 1.0
		CJDESIGN : CjTagBoard 3.0
		CJDESIGN : CjLinkOut 1.0
		CJDESIGN : CjWeb2Mail 3.0

Original document		psymera_(at)_hotmail.com, Cj Desing Three Aplications One Bug (10.09.2005)
		retrogod_(at)_aliceposta.it, class-1 Forum Software v 0.24.4 Remote code execution (10.09.2005)
		SECUNIA, [SA16731] MAXdev MD-Pro Cross-Site Scripting and File Upload Vulnerabilities (09.09.2005)
		SECUNIA, [SA16726] Unclassified NewsBoard "Description" Script Insertion Vulnerability (09.09.2005)
		CIRT Advisory, [Full-disclosure] 3 minor vulnerabilities in IPSwitch products (09.09.2005)
		morning_wood, [Full-disclosure] mimicboard2 (09.09.2005)
		retrogod_(at)_aliceposta.it, PBLang 4.65 (possibly prior versions) remote code execution (09.09.2005)
		r.verton_(at)_gmail.com, [NewAngels Advisory #5] Stylemotion WEB//NEWS 1.4 Vulnerabilities (09.09.2005)
		SECURITEAM, [EXPL] Man2web CGI Command Execution (09.09.2005)
		r0t3d3Vil, aMember Pro 2.3.X - Remote File Include Vulnerability (09.09.2005)
		bhfh_(at)_walla.com, PHP-Nuke (07.09.2005)
		retrogod_(at)_aliceposta.it, UNB 1.5.3 cross site scripting (07.09.2005)
		4Degrees_(at)_46and2.com , [NewAngels Advisory] aMember Pro 2.3.X - Remote File Include Vulnerability (07.09.2005)
		retrogod_(at)_aliceposta.it, phpCommunityCalendar 4.0.3 (possibly prior versions) sql injection / login bypass / cross site scripting (07.09.2005)
		SECUNIA, GuppY Multiple Vulnerabilities (06.09.2005)
		SECUNIA, [Full-disclosure] Secunia Research: SqWebMail Conditional Comments Script Insertion Vulnerability (06.09.2005)
		Parikh, Dominic, [Full-disclosure] XSS VULN IN ALL MYBB VERSIONS (INCLUDING PR2) (06.09.2005)
		SECUNIA, myBloggie "username" SQL Injection Vulnerability (05.09.2005)

Files:		Class-1 Forum sql injection / remote code execution poc exploit
		Man2web CGI Command Execution
Discuss:		Read or add your comments to this news (0 comments)