Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		15.08.2006
Source:
SecurityVulns ID:		6495
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		XMBFORUM : XMB Forum 1.9
		INVISION : Invision Power Board 2.1
		VWAR : vWar 1.50
		MAMBO : Peoplebook Mambo Component 1.0

Original document		SECUNIA, [SA21442] Invision Power Board Threaded View Mode Security Bypass (15.08.2006)
		vampire_chiristof_(at)_yahoo.com, BlaBla 4U XSS Vulnerabilite (15.08.2006)
		vampire_chiristof_(at)_yahoo.com, Virtual War v1.5.0 SQL injection and XSS (15.08.2006)
		ssteam.pl_(at)_gmail.com, Wordpress WP-DB Backup Plugin Directory Traversal Vulnerability (15.08.2006)
		matdhule_(at)_gmail.com, Peoplebook Mambo Component <= v1.0 Remote File Include Vulnerabilities (15.08.2006)
		x0r0n_(at)_hotmail.com, Joomla Webring Component (component_dir) Remote File Inclusion Vulnerabilities (15.08.2006)

Files:		Exploits XMB <= 1.9.6 Final basename() 'langfilenew' arbitrary local inclusion / remote commands xctn
Discuss:		Read or add your comments to this news (0 comments)