Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		15.09.2006
Source:
SecurityVulns ID:		6620
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHOTOPOST : PhotoPost 4.6
		LIMBO : Limbo CMS 1.0
		BMFORUM : Blue Magic Board 5.5
		MAGICNEWSPRO : agic News Pro 1.0
		BLOJSOM : Blojsom 2.3
		PHPDOCWRITER : phpdocwriter 0.3
		HABERX : Haberx 1.1

Original document		fixtr_(at)_bsdmail.com, Haberx v1.1 (tr) SQL Injection Vulnerability (15.09.2006)
		MILW0RM, BolinOS v.4.5.5 <= (gBRootPath) Remote File Include Vulnerability (15.09.2006)
		p3rlhax_(at)_gmail.com, XSS vulnerability in Blojsom (15.09.2006)
		Saudi Hackrz, Magic News Pro => 1.0.3 (script_path) Remote File Inclusion Exploit (15.09.2006)
		hack2prison_(at)_yahoo.com, Fullpath disclosure in Blue Magic Board 5.5 (15.09.2006)
		Saudi Hackrz, PhotoPost =>4.6 (PP_PATH) Remote File Inclusion Exploit (15.09.2006)

Files:		Limbo 1.0
		phpdocwriter <= 0.3 (script) Remote File Include Exploit
Discuss:		Read or add your comments to this news (0 comments)