Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		23.03.2006
Source:
SecurityVulns ID:		5936
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		ANYPORTAL : AnyPortal 0.1
		CUREPHP : CuteNews 1.4
		ADMAN : AdMan 1.0
		OSICODES : PHP Live! 3.0
		VBULLETIN : vBulletin ImpEx 1.74
		XHP : XHP CMS 0.5
		WEBCHECK : webcheck 1.9
		COMOBLOG : CoMoblog 1.1

Original document		SECUNIA, [SA19359] AnyPortal(php) "F" Directory Traversal Vulnerability (23.03.2006)
		farhadkey_(at)_kapda.ir, [KAPDA::#37] - CoMoblog XSS (23.03.2006)
		SECUNIA, [SA19309] webcheck Website Content Script Insertion Vulnerability (23.03.2006)
		Scott Dewey, [Full-disclosure] XOR Crew :: vBulletin ImpEx <= 1.74 - Remote Command Execution Vulnerability (23.03.2006)
		h e, cutenews 1.4.1 Arbitrary File Access (23.03.2006)
		kspecial, PHP Live! XSS status_image.php (23.03.2006)
		r0t, AdMan v1.0.x SQL vuln (23.03.2006)

Files:		vbulletin ImpEx Remote File Inclusion Exploit
		XHP CMS <= 0.5 remote cmmnds xctn
Discuss:		Read or add your comments to this news (0 comments)