Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		06.09.2006
Source:
SecurityVulns ID:		6580
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		ZUXFORUM : ZIXForum 1.12
		ANNONCE : Annonce 1.1
		PHPFULLANNU : phpFullAnnu 5.1
		MYSOURCECLASSIC : MySource Classic 2.14
		VCDDB : VCD-db 0.982

Original document		SECUNIA, [SA21781] VCD-db Comments Script Insertion Vulnerability (06.09.2006)
		SECUNIA, [SA21757] MySource Classic Equation Attribute PHP Code Injection (06.09.2006)
		SHiKaA-_(at)_hotmail.com, phpFullAnnu <= v5.1 (repmod) Remote File Inclusion Exploit (06.09.2006)
		MILW0RM, Beautifier v0.1 Remote File Inclusion Vulnerability (06.09.2006)
		botan_(at)_linuxmail.org, [Kurdish Security # 26 ] AnnonceV News Script Remote Command Vulnerability (06.09.2006)
		philipp.niedziela_(at)_gmx.de, MyBace Light (hauptverzeichniss) Remote File Inclusion (06.09.2006)
		jong_amq_(at)_hotmail.com, SolpotCrew Advisory #7 - AlstraSoft Template Seller Remote File Include Vulnerability (06.09.2006)
		Chironex Fleckeri, (c)ZIXForum 1.12 <= "RepId" Remote SQL Injection (06.09.2006)

Discuss:

Read or add your comments to this news (0 comments)