Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		05.04.2006
Source:		BUGTRAQ
SecurityVulns ID:		5976
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		INDEXU : INDEXU 5.0
		ARABPORTAL : ArabPortal 2.0
		HORDE : Horde 3.1
		ANGELINECMS : AngelineCMS 0.8
		SKFORUM : SKForum 1.5
		CRAFTYSYNTAX : crafty syntax image gallery 3.1

Original document		silentw, [Full-disclosure] WebEOC Vuln - more info (05.04.2006)
		r0t, SKForum XSS vuln. (05.04.2006)
		eufrato_(at)_gmail.com, [ECHO_ADV_27$2006] AngelineCMS 0.8.1 Installpath Remote File Inclusion (05.04.2006)
		o.y.6_(at)_hotmail.com, ArabPortal 2.0.1 Stable [ 9 CrossSiteScripting & 1 SQL Injection ] MultBugz (05.04.2006)
		GENTOO, [ GLSA 200604-02 ] Horde Application Framework: Remote code execution (05.04.2006)

Files:		PHPMyChat <= 0.14.5 "SYS enter" remote cmmnds xctn
		INDEXU <= 5.0.1 base_path Remote File Inclusion Exploit
		crafty syntax image gallery <= 3.1g exploit
		Exploits Horde help module remote execution
		Exploits Horde help viewer module remote PHP code execution
		AngelineCMS 0.8.1 installpath Remote Code Execution Exploit
Discuss:		Read or add your comments to this news (0 comments)