Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		17.05.2006
Source:
SecurityVulns ID:		6147
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		MYBLOGGIE : myBloggie 2.1
		PHPFUSION : PHP-Fusion 6.0
		WEBSITEBAKER : Website Baker 2.6
		QUEZZA : Quezza BB 1.0
		NEWSPORTAL : Newsportal 0.36

Original document		philipp.niedziela_(at)_gmx.de, Newsportal <= 0.36 Remote File Inclusion Vulnerability (17.05.2006)
		Mustafa Can Bjorn IPEKCI, Advisory: Quezza BB <= 1.0 File Inclusion Vulnerability. (17.05.2006)
		SECUNIA, [SA20081] Website Baker "display_name" Script Insertion Vulnerability (17.05.2006)
		newsportal_(at)_florian-amrhein.de, Newsportal: code injection vulnerability (17.05.2006)
		LiNuX_rOOt1_(at)_hotmail.com, IceWarp Cross-Site Scripting(XSS) (17.05.2006)
		soot hackers, PhpRemoteView Multiple Xss Vulnerabilities (17.05.2006)
		h4cky0u, [Full-disclosure] HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection (17.05.2006)

Files:		Exploits PHP-Fusion <= v6.00.306 "srch_where" SQL Injection/Admin credentials disclosure
Discuss:		Read or add your comments to this news (0 comments)