Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		08.07.2006
Source:
SecurityVulns ID:		6344
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		ATUTOR : ATutor 1.5
		AURACMS : Aura-CMS 1.62
		PIXELATEDBYLEV : PBL Guestbook 1.32
		HOSTINGCONTROLLE : HostingController 6.1
		ADVANCEDGUESTBOO : Advanced Guestbook 1.0
		EXTCALENDAR : ExtCalendar 2.0
		PHPBLOGGER : PHP-Blogger 2.2
		PIVOT : Pivot 1.30
		PAPOO : PAPOO 3

Original document		OS2A BTO, PHP-Blogger Multiple Cross Site Scripting Vulnerabilities (08.07.2006)
		bug_(at)_securitynews.ir, ATutor : Cross-Site Scripting Vulnerabilities (08.07.2006)
		matdhule_(at)_gmail.com, [ECHO_ADV_36$2006] ExtCalendar <== v2.0 Remote File Include Vulnerabilities (08.07.2006)
		luny_(at)_youfucktard.com, Sport-slo.net Guestbook v1.0 (08.07.2006)
		Soroush Dalili, HostingController: An attacker can gain reseller privileges and after that can gain admin privileges (08.07.2006)
		paisterist.nst_(at)_gmail.com, PBL Guestbook <= 1.32 XSS & SQL Querys Vulnerabilities (08.07.2006)
		k07iX, lintah_|adv|_01@2006>=========<[Aura-CMS v1.62]<===>[XSS vulnerable]&[bug] (08.07.2006)
		admin_(at)_jaascois.com, BosClassifieds Classified Ads System Remote File Include (08.07.2006)

Files:		Pivot <= 1.30 RC2 privileges escalation / remote commands execution exploit
		Exploits PAPOO <= 3_RC3 SQL injection / admin credentials disclosure
Discuss:		Read or add your comments to this news (0 comments)