Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		04.04.2006
Source:
SecurityVulns ID:		5969
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		MYBB : MyBB 1.10
		PHPWEBGALLERY : Phpwebgallery 1.4
		HOSTINGCONTROLLE : Hosting Controller 2002
		LUCIDSMC : LucidCMS 2.0
		RELOADCMS : ReloadCMS 1.2
		BLANKNBERG : Blank'N'Berg 0.20060215
		MONALBUM : Monalbum 0.8
		GTDPHP : gtd-php 0.5

Original document		SECUNIA, [SA19512] gtd-php Cross-Site Scripting and Script Insertion Vulnerabilities (04.04.2006)
		SECUNIA, [SA19503] MonAlbum Multiple SQL Injection Vulnerabilities (04.04.2006)
		SECUNIA, [SA19520] Blank'N'Berg Directory Traversal and Cross-Site Scripting (04.04.2006)
		rgod_(at)_autistici.org, ReloadCMS <= 1.2.5stable Cross site scripting / remote command execution (04.04.2006)
		xx_hack_xx_2004_(at)_hotmail.com, SQL Injection in Softbiz Image Gallery (04.04.2006)
		o.y.6_(at)_hotmail.com, MyBB 1.10 New CrossSiteScripting (04.04.2006)
		crasher_(at)_kecoak.or.id, Multiple Vulnerabilities in LucidCMS (04.04.2006)
		paolo.difebbo_(at)_gmail.com, Hosting Controller AccountActions.asp and saveuploadfiles.asp vulns (PoC) (04.04.2006)
		t4h4_(at)_linuxmail.org, Phpwebgallery <= 1.4.1 SQL injection Vulnerability (04.04.2006)

Files:		Exploits ReloadCMS <= 1.2.5stable Cross site scripting / remote command execution
Discuss:		Read or add your comments to this news (0 comments)