Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		22.04.2006
Source:
SecurityVulns ID:		6036
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		CORENEWS : CoreNews 2.0
		LOGMETHODS : logMethods 0.9
		DFORUM : dForum 1.5
		MKPORTAL : MKPortal 1.1
		SIMPLOG : Simplog 0.93

Original document		Mustafa Can Bjorn IPEKCI, [Full-disclosure] Advisory: CoreNews <= 2.0.1 Multiple Remote Vulnerabilities. (22.04.2006)
		Mustafa Can Bjorn IPEKCI, [Full-disclosure] Advisory: Simplog <= 0.93 Multiple Remote Vulnerabilities. (22.04.2006)
		Mustafa Can Bjorn IPEKCI, [Full-disclosure] vBulletin <= 3.5.4 with MKPortal 1.1 Remote SQL Injection Vulnerability. (22.04.2006)
		Mustafa Can Bjorn IPEKCI, [Full-disclosure] dForum <= 1.5 Multiple Remote File Inclusion Vulnerabilities. (22.04.2006)
		simo64_(at)_gmail.com, Scry Gallery Directory Traversal & Full Path Disclosure Vulnerabilites (22.04.2006)
		r0t, logMethods XSS vuln. (22.04.2006)

Files:		CoreNews <= 2.0.1 Remote SQL Injection Exploit
		Simplog <= 0.93 Remote SQL Injection Exploit
Discuss:		Read or add your comments to this news (0 comments)