Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		03.10.2006
Source:
SecurityVulns ID:		6676
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		JAFCMS : JAF CMS 4.0
		PEBBLE : Pebble 2.0
		DAYFOX : Dayfox Blog 2.0
		DIGISHOP : digishop 4.0

Original document		MILW0RM, BBaCE <= 3.5 (includes/functions.php) Remote File Include Vulnerability (03.10.2006)
		meto5757_(at)_hotmail.com, digishop v 4.0.0 Xss Vuln. (03.10.2006)
		Dj_ReMix_20_(at)_hotmail.com, Dayfox Blog v2.0 Remote file include (03.10.2006)
		Paolo Perego, Pebble 2.0.0 RC[1,2] XSS vulnerability (03.10.2006)

Files:		JAF CMS <= 4.0 RC1 Remote File Include Exploit
Discuss:		Read or add your comments to this news (0 comments)