Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		18.05.2006
Source:		BUGTRAQ
SecurityVulns ID:		6153
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHPBB : phpBB 2.0
		BOASTMACHINE : boastMachine 3.1
		OPENWIKI : OpenWiki 0.78
		SNITZ : Snitz Forums Avatar MOD 1.3
		BITRIX : Bitrix CMS 4.1
		DIESEL : Diesel PHP Job Site
		SCOZNEWS : ScozNews 1.2

Original document		SECUNIA, [SA20155] Serendipity Entry Manager Cross-Site Request Forgery (18.05.2006)
		SECUNIA, [SA20156] ScozNews "CONFIG[main_path]" File Inclusion Vulnerabilities (18.05.2006)
		Matt Gibson, [Full-disclosure] [Info Disclosure] Diesel PHP Job Site Latest Version (18.05.2006)
		Gogi The Georgian, [Full-disclosure] Multiple Vulns in Bitrix CMS (18.05.2006)
		CodeScan Labs, [Full-disclosure] CodeScan Advisory: Avatar MOD v1.3 for Snitz Forums v3.4 - Arbitrary File Upload (18.05.2006)
		LiNuX_rOOt1_(at)_hotmail.com, OpenWiki<--v0.78 Cross-Site Scripting (18.05.2006)
		SpiderZ, phpBB Mod [2.0.20] SQL Backup ( Remote File Inclusion ) (18.05.2006)

Discuss:

Read or add your comments to this news (0 comments)