Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) updated since 21.09.2006
Published:		21.09.2006
Source:
SecurityVulns ID:		6642
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		MAXDEV : MD-Pro 1.0
		ALLMYGUESTS : ALlMyGuests 0.4
		EXV2 : exV2 2.0
		PHPARTENAIRE : PHPartenaire 1.0
		POWERNEWS : PowerNews 1.1
		PTNEWS : PTNews 1.7
		DRUPAL : Search Keywords Drupal module 4.7
		DOTNETNUKE : DotNetNuke 4.3
		DOTNETNUKE : DotNetNuke 3.3

Original document		SECUNIA, [SA22051] DotNetNuke "error" Parameter Cross-Site Scripting Vulnerability (21.09.2006)
		SECUNIA, [SA22050] MAXdev MD-Pro Cross-Site Scripting Vulnerability (21.09.2006)
		SECUNIA, [SA21979] eSyndiCat Directory Software "what" Cross-Site Scripting (21.09.2006)
		SECUNIA, [SA22021] Drupal Search Keywords Module Script Insertion (21.09.2006)
		SECUNIA, [SA22028] PT News "pgname" Cross-Site Scripting Vulnerability (21.09.2006)
		SECUNIA, [SA22030] NextAge Cart "CatId" and "SearchWd" Cross-Site Scripting (21.09.2006)
		CvIr.System_(at)_gmail.com, PowerNews v1.1.0 (nbs) Remote File Inclusion (21.09.2006)
		dadiss_(at)_virtuaplanet.net, PHPartenaire => $url_phpartenaire Remote File Inclusion Exploit (21.09.2006)
		Brahim_(at)_legenie.net, AllMyGuests => ?_AMGconfig[cfg_serverpath] Remote File Inclusion Exploit (21.09.2006)

Files:		Exploits exV2 <= 2.0.4.3 "sort" SQL injection / administrative credentials disclosure
Discuss:		Read or add your comments to this news (0 comments)