Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		30.03.2006
Source:
SecurityVulns ID:		5959
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHXCONTACTS : PhxContacts 0.93
		WEBCALENDAR : Webcalendar 1.1
		XCHANGER : X-Changer 0.2
		EZASPSITE : EzASPSite 2.0
		VBOOK : VBook 2.0
		VNEWS : VNews 1.2

Original document		SECUNIA, [SA19435] VNews Multiple Vulnerabilities (30.03.2006)
		SECUNIA, [SA19448] VBook Multiple Vulnerabilities (30.03.2006)
		Mustafa Can Bjorn IPEKCI, [Full-disclosure] EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability. (30.03.2006)
		Jerome ATHIAS, [Full-disclosure] ExplorerXP : Directory Traversal and Cross Site Scripting (30.03.2006)
		dabdoub-mosikar_(at)_moroccan-security.com, X-Changer <=v0.2 Demo SQL injection (30.03.2006)
		crasher_(at)_kecoak.or.id, Full path disclosure in Webcalendar 1.1.0-CVS (30.03.2006)
		dabdoub-mosikar_(at)_moroccan-security.com, PhxContacts <= 0.93.1 beta Multiple SQL injection & xss (30.03.2006)

Discuss:

Read or add your comments to this news (0 comments)