Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		19.05.2006
Source:
SecurityVulns ID:		6157
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		COSMOSHOP : Cosmoshop 8.11
		ASPBB : AspBB 0.5
		myspace : Myspace Friend Train 2.8
		CODEAVALANCHE : CodeAvalanche News 1.2

Original document		SECUNIA, [SA20171] CodeAvalanche News "password" SQL Injection Vulnerability (19.05.2006)
		luny_(at)_youfucktard.com, Myspace Friend Train v2.8 (19.05.2006)
		TeufeL Online, AspBB Forum "profile.asp & default.asp" XSS Vulnerability (19.05.2006)
		l0om, [cosmoshop again] sql injection + view all files as admin user (19.05.2006)

Discuss:

Read or add your comments to this news (0 comments)