Web applications security vulnerabilities (PHP, ASP, CGI, Perl, etc) updated since 21.09.2005
Published:		21.09.2005
Source:
SecurityVulns ID:		5232
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHPBB : phpBB 2.0
		VBULLETIN : vBulletin 3.0
		ALSTRASOFT : EPay Pro 2.0
		HESK : Hesk 0.93
		CUREPHP : CuteNews 1.4
		WEBMIN : Usermin 1.150
		WEBMIN : Webmin 1.220
		PHPATM : PHP Advanced Transfer Manager 1.30
		TAC : Vista 3.0
		TAC : Vista 4.2

Original document		SNS, [SNS Advisory No.83] Webmin/Usermin PAM Authentication Bypass Vulnerability (26.09.2005)
		SECUNIA, TAC Vista "Template" Disclosure of Sensitive Information Vulnerability (21.09.2005)
		SECUNIA, PHP Advanced Transfer Manager Multiple Vulnerabilities (21.09.2005)
		SECUNIA, Webmin / Usermin PAM Authentication Bypass Vulnerability (21.09.2005)
		retrogod_(at)_aliceposta.it, CuteNews 1.4.0 remote code execution (21.09.2005)
		Thomas Waldegger, [BuHa-Security] Multiple vulnerabilities in (admincp/modcp of) vBulletin 3.0.8/9 (21.09.2005)
		h4cky0u_(at)_gmail.com , Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability (21.09.2005)
		SmOk3, phpBB 2.0.17 remote avatar size bug (21.09.2005)
		os2a_bto_(at)_gmail.com, Hesk Session ID Validation Vulnerability (21.09.2005)

Discuss:

Read or add your comments to this news (0 comments)