Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		22.06.2006
Source:
SecurityVulns ID:		6282
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		CMSFAETHON : CMS Faethon 1.3
		SOMECHESS : Somechess 1.5
		CJGUESTBOOK : cjGuestbook 1.3
		MICROCMS : Micro CMS 0.3
		IDEABOX : IdeaBox 1.1

Original document		Kacper, IdeaBox <= 1.1 (gorumDir) Remote File Include Vulnerability (22.06.2006)
		CeNGiZ-HaN, Micro CMS <= 0.3.5 (microcms_path) Remote File Include Vulnerability (22.06.2006)
		Kw3rLn, Grayscale BandSite CMS <=([root_path]) Remote File Include Vulnerabilities (22.06.2006)
		Silitix, [Full-disclosure] Calendar ( Provided by Codewalkers ) - SQL Injection (22.06.2006)
		SECUNIA, [SA20713] CMS Faethon "mainpath" File Inclusion and Cross-Site Scripting Vulnerabilities (22.06.2006)
		:) :), Eduha Meeting php shell upload Vulnerabilities (22.06.2006)
		luny_(at)_youfucktard.com, cjGuestbook v1.3 - XSS (22.06.2006)
		luny_(at)_youfucktard.com, Somechess v1.5 rc1 - XSS (22.06.2006)

Files:		Ultimate PHP Board <= 1.96 GOLD Multiple Vulnerabilities Exploit
Discuss:		Read or add your comments to this news (0 comments)