Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		22.01.2006
Source:
SecurityVulns ID:		5674
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		MYBB : MyBB 1.0
		EGGBLOG : eggblog 2.0
		BLOGPHP : BlogPHP 1.2
		SARABLOG : SaraBlog 1.0
		RCBLOG : RCBlog 1.0
		CLAROLINE : Claroline 1.7

Original document		karmaguedon_(at)_hotmail.com, Claroline 1.7.2, sso identification vulnerability (22.01.2006)
		imei, MyBB 1.0.2 Sniffing table perfix bug in search.php (22.01.2006)
		Aliaksandr Hartsuyeu, [eVuln] RCBlog Directory Traversal & Sensitive Information Disclosure (22.01.2006)
		Aliaksandr Hartsuyeu, [eVuln] SaralBlog XSS & Multiple SQL Injection Vulnerabilities (22.01.2006)
		Aliaksandr Hartsuyeu, [eVuln] eggblog Multiple SQL Injection & XSS Vulnerabilities (22.01.2006)
		imei, BlogPHP config.php SQL injection login bypass (22.01.2006)

Discuss:

Read or add your comments to this news (0 comments)