 |
|
|
|
| Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | | Published: |  | 04.07.2006 | | Source: |  | | | SecurityVulns ID: |  | 6334 | | Type: |  | remote | | Level: |  | 5/10 | | Description: |  | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. |
| Original document |  | ineal_(at)_gmail.com, galleria <= 1.0 Remote File Inclusion Vulnerability (04.07.2006) |
| |  | SECUNIA, [SA20936] Vincent LECLERCQ News Cross-Site Scripting and SQL Injection (04.07.2006) |
| |  | SECUNIA, [SA20901] FineShop Cross-Site Scripting and SQL Injection (04.07.2006) |
| |  | SECUNIA, [SA20884] MKPortal "ind" Local File Inclusion Vulnerability (04.07.2006) |
| |  | SECUNIA, [SA20930] Invision Power Board Cross-Site Scripting and Security Bypass (04.07.2006) |
| |  | SECURITEAM, [NT] ASP Stats Generator Multiple Vulnerabilities (SQL Injection, Code Execution) (04.07.2006) |
| |  | Marc Ruef, [Full-disclosure] [scip_Advisory 2351] Kyberna AG ky2help various form fields SQL Injection (04.07.2006) |
| |  | securityconnection_(at)_gmail.com, TBE 4.0 XSS (04.07.2006) |
| |  | gmdarkfig_(at)_gmail.com, 5 php scripts remote database password disclosure (04.07.2006) |
| |  | Breeeeh_(at)_hotmail.com, Invision Power Board v1.3 Final SQL Injection (04.07.2006) |
| |  | securityconnection_(at)_gmail.com, QTOFileManager 1.0 (04.07.2006) |
| |  | BoNy-m_(at)_hotmail.com, popup Vacation Rentals[calendar_year.php] SQL Injection (04.07.2006) |
| |  | xzerox_(at)_linuxmail.org, Pearl Products Multiple Remote File Inclusion (04.07.2006) |
| |  | KARKOR23_(at)_hotmail.com, free QBoard v1.1 Multiple Remote File include (04.07.2006) |
| |  | KARKOR23_(at)_hotmail.com, plume-cms v1.0.4 Multiple Remote File include (04.07.2006) |
| |  | Aesthetico, WordPress 2.0.3 SQL Error and Full Path Disclosure (04.07.2006) |
| |  | Aesthetico, [MajorSecurity #19] AutoRank <= 5.01 - Multiple XSS and cookie disclosure (04.07.2006) |
| |  | CrAzY.CrAcKeR_(at)_hotmail.com, Glossaire<<--v1.7 Remote File Include (04.07.2006) |
| |  | zeberus__(at)_hotmail.com, Php-Fusion (Xss) With Avatar Upload (04.07.2006) |
|
|
|
|
|
|
|
|