Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		25.09.2006
Source:
SecurityVulns ID:		6649
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		TYPO3 : TYPO3 4.0
		WEBNEWS : Web-News 1.6
		ZOOMSTATS : ZoomStats 1.0
		IYZI : iyzi Forum 1.0

Original document		fixtr_(at)_bsdmail.com, iyzi Forum s1 b2 (tr) SQL Injection Vulnerability (25.09.2006)
		MILW0RM, ZoomStats <= 1.0.2 (mysql.php) Remote File Include Vulnerability (25.09.2006)
		SECUNIA, [SA22075] Web-News "content_page" File Inclusion Vulnerability (25.09.2006)
		cdg393, [Full-disclosure] Local File Inclusion : Kietu (25.09.2006)
		God Of Death (G.O.D), [Full-disclosure] Remote File Include in syntaxCMS (25.09.2006)
		security_(at)_moritz-naumann.com, [Full-disclosure] Typo3 v4.x: XSS in extension "Indexed Search" v2.9.0 (25.09.2006)

Discuss:

Read or add your comments to this news (0 comments)