Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		27.06.2006
Source:
SecurityVulns ID:		6299
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		CLAROLINE : Claroline 1.7
		LIMBOCMS : LimboCMS 1.0
		WINGED : Winged Gallery 1.0
		OPENGUESTBOOK : Open Guestbook 0.5
		MYMAIL : MyMail 1.0
		DELUXEBB : DeluxeBB 1.07
		CPANEL : CPanel 10
		JAWS : Jaws 0.6
		METALHEAD : Usenet Script 0.5

Original document		luny_(at)_youfucktard.com, Usenet Script v0.5 (27.06.2006)
		preth00nker_(at)_gmail.com, XSS in Cpanel 10 (27.06.2006)
		alp_eren_(at)_ayyildiz.org, Planetnews Authecnication Admin ByPass (27.06.2006)
		Hessam Salehi, DeluxeBB 1.07 Create admin Exploit (27.06.2006)
		bug_(at)_securitynews.ir, Claroline Cross-Site Scripting Vulnerabilities (27.06.2006)
		botan_(at)_linuxmail.org, [Kurdish Security # 9] MyMail Directory Traversal And XSS Attacking Vulnerability (27.06.2006)
		luny_(at)_youfucktard.com, Winged Gallery v1.0 (27.06.2006)
		hazer.cft_(at)_gmail.com, Множественные уязвимости в Limbo <=1.0.4.2 (27.06.2006)

Files:		DeluxeBB <= 1.07 Create Admin Exploit
		Exploits Jaws <= 0.6.2 'Search gadget' SQL injection / admin credentials disclosure
Discuss:		Read or add your comments to this news (0 comments)