Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		22.03.2006
Source:
SecurityVulns ID:		5922
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		1WEBCALENDAR : 1WebCalendar 4.0
		MININUKE : Mini-NUKE 1.8
		ASPPORTAL : ASPPortal 3.1
		FREEWPS : FreeWPS 2.11
		OSWIKI : OSWiki 0.3

Original document		Aliaksandr Hartsuyeu, [eVuln] PHP SimpleNEWS, PHP SimpleNEWS MySQL - Authentication Bypass Vulnerability (22.03.2006)
		SECUNIA, [SA19290] OSWiki Username Script Insertion Vulnerability (22.03.2006)
		Mustafa Can Bjorn IPEKCI, ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities (22.03.2006)
		botan_(at)_linuxmail.org, Free Articles Directory Remote Command Exucetion (22.03.2006)
		dabdoub_mosikar_(at)_forislam.com, Mini-Nuke<=1.8.2 SQL injection (6) (22.03.2006)
		r0t, 1WebCalendar v 4.x vuln. (22.03.2006)

Files:		freewps 2.11 exploit
Discuss:		Read or add your comments to this news (0 comments)