Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		20.03.2006
Source:
SecurityVulns ID:		5911
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		NOAH : Classifieds 1.3
		CUREPHP : CuteNews 1.4
		EXTCALENDAR : ExtCalendar 1.0
		ILOHAMAIL : ilohamil 0.8
		STREBER : Streber 0.05
		SOFTBB : SoftBB 0.1
		GCARDS : gCards 1.45
		SLAB500 : SLAB500

Original document		keitel andres ortega, Path Disclosure and Arbitrary File Read Vulnerability in SLAB5000 (20.03.2006)
		SECUNIA, [SA19289] CuteNews "archive" Disclosure of Sensitive Information Vulnerability (20.03.2006)
		SECUNIA, [SA19283] SoftBB "mail" SQL Injection Vulnerability (20.03.2006)
		SECUNIA, [SA19263] Streber Unspecified Script Insertion Vulnerability (20.03.2006)
		raphael.huck_(at)_free.fr, Noah's Classifieds Multiple Path Disclosure and Cross Site Scripting Vulnerabilities (20.03.2006)
		dabdoub_mosikar_(at)_forislam.com, phpWebsite <= SQL Injection (friend.php) & (article.php) (20.03.2006)
		DEBIAN, [SECURITY] [DSA 1010-1] New ilohamail packages fix cross-site scripting vulnerabilities (20.03.2006)
		soot hackers, ExtCalendar v1.0 Multiple Xss Vuln (20.03.2006)

Files:		SoftBB BruteForcing tool
		Exploits gCards <= 1.45 multiple vulnerabilities
Discuss:		Read or add your comments to this news (0 comments)