Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		15.02.2006
Source:
SecurityVulns ID:		5775
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHPNUKE : phpNuke 7.8
		MANTIS : Mantis 1.0
		WORDPRESS : WordPress 2.0
		DELTASCRIPTS : PHP Classifieds 6.20
		DOTPROJECT : dotProject 2.0
		MYBB : MyBB 1.03

Original document		Thomas Waldegger, [BuHa-Security] Multiple Vulnerabilities in Mantis 1.00rc4 (15.02.2006)
		imei, [myimei]WordPress2.0.0~autorswebsite~XSS attack (15.02.2006)
		s2b_(at)_hotmail.com, MyBB 1.03 Multible xss and sql injections (15.02.2006)
		Alexander Hristov, XSS bugs and SQL injection in sNews (15.02.2006)
		r.verton_(at)_gmail.com, dotproject <= 2.0.1 remote code execution (15.02.2006)
		Janek Vind, [waraxe-2006-SA#044] - XSS in phpNuke 7.8 and older versions (15.02.2006)
		audun.larsen_(at)_lkonsult.no, SQL injection in PHP Classifieds 6.20 (15.02.2006)

Files:		MyBB Forum SQL Injection Exploit
Discuss:		Read or add your comments to this news (0 comments)