Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		30.01.2006
Source:
SecurityVulns ID:		5713
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		UEBIMIAU : UebiMiau 2.7
		MININUKE : Mininuke 1.8
		MYBB : MyBB 1.02
		SUBDREAMER : Subdreamer CMS 2.2
		CRELOADED : CRE Loaded 6.15

Original document		night_warrior771_(at)_hotmail.com, sPaiz-Nuke Cross-Site Scripting Vulnerability (30.01.2006)
		zeus olimpusklan, [Full-disclosure] ashnews Cross-Site Scripting Vulnerability (30.01.2006)
		Hessam Salehi, [xpl#2] MiniNuke 1.8.2 - change member's passwrod < Perl > (30.01.2006)
		o.y.6_(at)_hotmail.com, MyBB 1.2 usercp2.php [ $url ] CrossSiteScripting ( XSS ) (30.01.2006)
		Preben Nylokken, EasyCMS vulnerable to XSS injection. (30.01.2006)
		neset_(at)_wakiza.com, UebiMiau Webmail System Security Vulnerability (30.01.2006)
		SECUNIA, [SA18648] CRE Loaded "files.php" File Upload Security Issue (30.01.2006)
		JET, Subdreamer CMS (Pro 2.2.3 and Light 2.2.0.1) security bug ;) (30.01.2006)

Files:		Exploits MiniNuke 1.8.2 - change member's passwrod vulnerability
Discuss:		Read or add your comments to this news (0 comments)