Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		14.08.2006
Source:
SecurityVulns ID:		6490
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		WEBINSTA : WEBInsta 1.3
		MYWEBLAND : miniBloggie 1.0
		CALENDARIX : Calendarix 0.7
		WEBINSTRA : WEBinsta CMS 0.3
		ASPPLAYGROUND : ASPPlayground.NET Advanced Edition 2.4
		MYWEBLAND : myEvent 1.4
		VWAR : vWar 1.50
		STARTPAGE : Startpage 1.0

Original document		sh3ll_(at)_sh3ll.ir, miniBloggie <= 1.0 (fname) Remote File Inclusion Vulnerability (14.08.2006)
		sh3ll_(at)_sh3ll.ir, Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability (14.08.2006)
		philipp.niedziela_(at)_gmx.de, WEBInsta Mailing list manager (cabsolute_path) 1.3e RFI (14.08.2006)
		outlaw_(at)_aria-security.net, wheatblog ُSession.php Remote File Inclusion (14.08.2006)
		brom0815_(at)_gmx.de, VWar <= 1.50 R14 (n) Remote SQL Injection (14.08.2006)
		sh3ll_(at)_sh3ll.ir, Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability (14.08.2006)
		sh3ll_(at)_sh3ll.ir, myEvent <= 1.4 Multiple Remote File Include Vulnerabilities (14.08.2006)
		blood2_20032003_(at)_yahoo.com, Forum Software ASPPlayground.NET Advanced Edition 2.4.5 Unicode Xss (14.08.2006)
		erdc_(at)_echo.or.id, [ECHO_ADV_45$2006] WEBinsta CMS 0.3.1 (templates_dir) Remote File Inclusion Vulnerability (14.08.2006)

Discuss:

Read or add your comments to this news (0 comments)