Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		13.09.2006
Source:
SecurityVulns ID:		6610
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		SOFTCOMPLEX : PHP Event Calendar 1.5
		WTOOLS : WTools 0.0
		PHPBB : phpBB XS 0.58
		SQLLEDGER : SQL-Ledger 2.6
		LEDGERSMB : LedgerSMB 1.0
		NEWSSCRIPT : Newsscript 0.5
		CCHOST : ccHost 3.0
		SIGNKORN : Signkorn Guestbook 1.3
		QuickSilver : Quicksilver Forum 1.2

Original document		bilkopat_(at)_hotmail.com, Quicksilver Forums [(v1.2.0)+(1.2.1)] (set[include_path]) Remote File Inclusion Vulnerabilities (13.09.2006)
		SHiKaA-_(at)_hotmail.com, Signkorn Guestbook <= v1.3 (dir_path) Remote File Inclusion Exploit (13.09.2006)
		SECUNIA, [SA21822] ccHost File ID SQL Injection Vulnerability (13.09.2006)
		daftrix_(at)_gmail.com, Newsscript version 0.5 (print.php) Local File Inclusion Vulnerability (13.09.2006)
		Chris Travers, LedgerSMB 1.0.0 and SQL-Ledger 2.6.18 and earler arbitrary code execution (13.09.2006)
		azzcoder_(at)_hotmail.com, AzzCoder => phpBB XS 0.58 Remote File Include (13.09.2006)
		erne_(at)_ernealizm.com, WTools v0.0.1-ALPH - Remote File Include Vulnerabilities (13.09.2006)

Discuss:

Read or add your comments to this news (0 comments)