Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		25.01.2006
Source:
SecurityVulns ID:		5691
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHPBB : phpBB 2.0
		E-MOTIONALIS : e-moBLOG 1.3
		NOTEADAY : Note-A-Day 2.1
		WEBWORK : WeBWorK Online Homework Delivery System 2.1
		MYBB : MyBB 1.02
		REAMDAY : Reamday Enterprises Magic News Plus 1.0
		REAMDAY : Reamday Enterprises Magic News Lite 1.3

Original document		SECUNIA, [SA18601] Reamday Enterprises Magic News Password Change Bypass (25.01.2006)
		h4cky0u, [Full-disclosure] HYSA-2006-001 phpBB 2.0.19 search.php and profile.php DOS Vulnerability (25.01.2006)
		SECUNIA, [SA18603] MyBB User Control Panel Cross-Site Request Forgery (25.01.2006)
		SECUNIA, [SA18594] WeBWorK Arbitrary Command Execution Vulnerability (25.01.2006)
		Aliaksandr Hartsuyeu, [eVuln] Note-A-Day Weblog Sensitive Information Disclosure (25.01.2006)
		Aliaksandr Hartsuyeu, [eVuln] e-moBLOG SQL Injection Vulnerability (25.01.2006)

Files:		phpBBDosReloaded - Originally NsT-phpBB DoS
Discuss:		Read or add your comments to this news (0 comments)