Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		02.04.2006
Source:
SecurityVulns ID:		5968
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		EZASPSITE : EzASPSite 2.0
		BUGZERO : Bugzero 4.3
		SQUERY : SQuery 4.5
		PHPNUKECLAN : PHPNuke-Clan 3.0
		DDBS : DbbS 2.0
		FLEXIBLE : FleXiBle 3.0
		W3G : Warcraft III Replay Parser for PHP 1.8

Original document		botan_(at)_linuxmail.org, Warcraft III Replay Parser Script Remote Command Exucetion Vulnerability And Cross-Site Scripting Attacking (02.04.2006)
		ali_(at)_hackerz.ir, SiteMan <= All version SQL injection in admin_login.asp (02.04.2006)
		ali_(at)_hackerz.ir, linksubmit <= All version Html Tag Injector in index.php (02.04.2006)
		botan_(at)_linuxmail.org, FleXiBle Development Script Remote Command Exucetion And XSS Attacking (02.04.2006)
		dabdoub-mosikar_(at)_moroccan-security.com, DbbS<=2.0-alpha SQL injection (02.04.2006)
		Mustafa Can Bjorn IPEKCI, EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability. (02.04.2006)
		r0t, Bugzero XSS vuln. (02.04.2006)

Files:		PHPNuke-Clan 3.0.1 Remote File Inclusion Exploit
		SQuery <= 4.5 Remote File Inclusion Exploit
Discuss:		Read or add your comments to this news (0 comments)