Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		24.04.2006
Source:
SecurityVulns ID:		6040
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		CLANSYS : Clansys 1.1
		RATEIT : RateIt 2.2
		FLEXBB : FlexBB 0.5
		BKFORUM : BK Forum 4.0
		SCRY : Scry Gallery 1.1
		TOTALCALENDAR : TotalCalendar 2.30

Original document		omnipresent_(at)_email.it, RIblog Remote SQL Injection Exploit (24.04.2006)
		Aesthetico, [MajorSecurity] TotalCalendar 2.30 - Remote File Include Vulnerability (24.04.2006)
		n0m3rcy_(at)_bsdmail.org, BK Forum <= 4.0 Remote SQL Injection (24.04.2006)
		Aditya_(at)_Metaeye.Org, XSS Bug in OpenGear Server Website (24.04.2006)
		n0m3rcy_(at)_bsdmail.org, FileLodge Bolt (showonlineusers.php) Cross-Site Scripting Vulnerbility (24.04.2006)
		Aliaksandr Hartsuyeu, [eVuln] RateIt SQL Injection Vulnerability (24.04.2006)
		arko.dhar_(at)_gmail.com, Scry Gallery XSS Vulnerability (24.04.2006)
		Mustafa Can Bjorn IPEKCI, [Full-disclosure] Advisory: Clansys <= 1.1 PHP Code Insertion Vulnerability. (24.04.2006)

Files:		FlexBB Exploit [ function/showprofile.php ] Remote SQL Injection
Discuss:		Read or add your comments to this news (0 comments)