|
| Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | | Published: |  | 05.06.2006 | | Source: |  | | | SecurityVulns ID: |  | 6219 | | Type: |  | remote | | Level: |  | 5/10 | | Description: |  | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. |
| Affected: |  | ADVANCEDGUESTBOO : Advanced Guestbook 2.3 | | | | COOLFORUM : CoolForum 0.8 | | | | DOTCLEAR : Dotclear 1.2 | | | | DOTPROJECT : dotProject 2.0 | | | | LIFETYPE : LifeType 1.0 | | | | XUEBOOK : xueBook 1.0 | | | | IBWD : iBWd Guestbook 1.0 | | | | PIXELPOST : Pixelpost 1-5 | | | | LOCAZOLIST : LocazoList Classifieds 1.05 | | | | DOTWIDGET : dotWidget CMS 1.0 | | | | DOKUWIKI : DokuWiki 2006/06/04 | | | | OSADS : OSADS 1.3 | | | | BLUESHOES : BlueShoes Framework 4.5 | | | | BLUESHOES : BlueShoes Framework 4.6 |
| Original document |  | SECUNIA, [SA20418] dotProject Cross-Site Scripting Vulnerability (05.06.2006) |
| | | SECUNIA, [SA20438] BlueShoes Framework Multiple File Inclusion Vulnerabilities (05.06.2006) |
| | | SECUNIA, [SA20441] OSADS Board Comments Script Insertion Vulnerability (05.06.2006) |
| | | Stefan Esser, [Full-disclosure] Advisory 04/2006: DokuWiki PHP code execution vulnerability in spellchecker (05.06.2006) |
| | | CrAzY.CrAcKeR_(at)_hotmail.com, SMS "messages.php" SQL injection (05.06.2006) |
| | | try_og_(at)_hotmail.com, Timberland Search XSS Vulnerability (05.06.2006) |
| | | Aesthetico, [MajorSecurity #7]dotWidget CMS <= 1.0.6 - Remote File Include Vulnerability (05.06.2006) |
| | | canberx_(at)_linuxmail.org, phpBB2 (template.php) Remote File Inclusion (05.06.2006) |
| | | ajannhwt_(at)_hotmail.com, LocazoList Classifieds <= v1.05e(viewmsg.asp) Remote SQL Injection Vulnerability (05.06.2006) |
| | | gmdarkfig_(at)_gmail.com, Critical SQL Injection in CoolForum (05.06.2006) |
| | | SpC-x, Advanced Guestbook 2.3.1 /index.PHP/ SQL Injection (05.06.2006) |
| | | SpC-x, AzDGGuestbook SQL Injection Vulnerability (05.06.2006) |
| | | SpC-x, LDU Portal All Version SQL Injection (05.06.2006) |
| | | SpC-x, iBWd Guestbook 1.0 SQL Injection (05.06.2006) |
| | | SpC-x, xueBook 1.0 Version SQL Injection (05.06.2006) |
|
|
|
|
|
