Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		26.02.2006
Source:
SecurityVulns ID:		5829
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		SPID : SPiD 1.3
		PHPNUKE : phpNuke 7.8
		PENTACLE : In-Out Board 6.03
		EZPUBLISH : eZ publish 3.7
		FREEHOSTSHOP : Website Generator 3.3
		DCIDESIGN : DCI-Taskeen 1.03

Original document		xx_hack_xx_2004_(at)_hotmail.com, SQL Injection in DCI-Taskeen (26.02.2006)
		Janek Vind, [waraxe-2006-SA#047] - Evading sql-injection filters in phpNuke 7.8 (26.02.2006)
		NSA Group, NSA Group Security Advisory NSAG-№202-25.02.2006 Vulnerability WEBSITE GENERATOR 3.3 (26.02.2006)
		NSA Group, NSA Group Security Advisory NSAG-№201-25.02.2006 Vulnerability SPiD v1.3.1 (26.02.2006)
		Mustafa Can Bjorn IPEKCI, Advisory: eZ publish <= 3.7.3 (imagecatalogue module) XSS vulnerability (26.02.2006)
		Mustafa Can Bjorn IPEKCI, Advisory: Pentacle In-Out Board <= 6.03 (newsdetailsview.asp newsid) Remote SQL Injection Vulnerability (26.02.2006)
		Mustafa Can Bjorn IPEKCI, Advisory: Pentacle In-Out Board <= 6.03 (login.asp) Authencation ByPass Vulnerability (26.02.2006)

Discuss:

Read or add your comments to this news (0 comments)