Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		14.07.2006
Source:
SecurityVulns ID:		6378
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		FLIPPERPOLL : Flipper Poll 1.1
		FLATNUKE : Flatnuke 2.5
		JOOMLA : com_hashcash 1.2
		JOOMLA : HTMLArea3 1.3
		MAMBO : Sitemap 2.0
		PHOTOCYCLE : Photocycle 1.0
		SCOZNET : ScozNews Final-Php 1.1
		ORBITCODERS : Orbitmatrix PHP Script 1.0
		PHORUM : PHORUM 5
		PHPBB : PhpBB 3.0
		JOOMLA : perForms 1.0
		CZARNEWS : CzarNews 1.20

Original document		SECUNIA, [SA21038] CzarNews "tpath" File Inclusion Vulnerability (14.07.2006)
		Chironex Fleckeri, SubberZ[Lite] - Remote File Include (14.07.2006)
		endeneu_(at)_linuxmail.com, perForms <= 1.0 ([mosConfig_absolute_path]) Remote File Inclusion (14.07.2006)
		rgod_(at)_autistici.org, flatnuke <= 2.5.7 arbitrary php file upload (14.07.2006)
		x0r0n_(at)_hotmail.com, Flipper Poll <= 1.1.0 Remote File Inclusion Vulnerability (14.07.2006)
		luny_(at)_youfucktard.com, Orbitmatrix PHP Script v1.0 (14.07.2006)
		luny_(at)_youfucktard.com, Photocycle v1.0 - XSS (14.07.2006)
		x0r0n_(at)_hotmail.com, ScozNews Final-Php <=1.1 Remote File Inclusion Vulnerability (14.07.2006)
		matdhule_(at)_gmail.com, [ECHO_ADV_38$2006] Multiple Mambo/Joomla Component Remote File Include Vulnerabilities (14.07.2006)

Files:		Exploits PhpBB 3 memberlist.php/'ip' argument SQL injection / admin credentials disclosure
		PHORUM 5 arbitrary local inclusion exploit
Discuss:		Read or add your comments to this news (0 comments)