Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		22.02.2006
Source:
SecurityVulns ID:		5807
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PUNBB : PunBB 1.2
		CUREPHP : CuteNews 1.4
		INVISION : Invision Power Board 2.1
		BIRTHSYS : BirthSys 3.1
		CPANEL : cPanel 10.8
		MAGICNEWSLITE : Magic News Lite 1.2
		REAMDAYSOFT : Magic Downloads 1.1
		PEAR : Pear 0.16

Original document		JeiAr, PEAR LiveUser File Access Vulnerabilities (22.02.2006)
		imei, [myimei]CuteNews1.4.1~ Add Comment For Protected UserNames~ XSS Attack (22.02.2006)
		Aliaksandr Hartsuyeu, [eVuln] Magic Downloads Unauthorized Data Modification (22.02.2006)
		Mustafa Can Bjorn IPEKCI, MiniNuke CMS System all versions (pages.asp) SQL Injection (22.02.2006)
		Aliaksandr Hartsuyeu, [eVuln] Magic News Lite PHP Code Execution & Unauthorized Data Modification (22.02.2006)
		Ed Wiget, how to crash apache/php in cpanel (22.02.2006)
		k4p0k4p0_(at)_hotmail.com, [eVuln] BirthSys SQL Injection Vulnerability (22.02.2006)
		k4p0k4p0_(at)_hotmail.com, PunBB 1.2.10 Multiple DoS Vulnerabilities (22.02.2006)
		paisterist.nst_(at)_gmail.com, Invision Power Board 2.1.4 Multiple Vulnerabilities (22.02.2006)

Discuss:

Read or add your comments to this news (0 comments)