Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		01.11.2006
Source:
SecurityVulns ID:		6759
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHPNUKE : PHP-Nuke 7.9
		PHPMYCONFERENCES : phpMyConferences 8.0
		BFEXPLORER : bfExplorer 0.0
		ZENDGDATA : ZendGData Preview 0.2

Original document		LegendaryZion, Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech" (01.11.2006)
		security_(at)_armorize.com, Multiple XSS Vulnerabilities in Zend Google Data Client Library Preview 0.2.0 (01.11.2006)
		LegendaryZion, Cross Site Scripting (XSS) Vulnerability in Web Mail service by "Walla! Communications LTD" (01.11.2006)
		LegendaryZion, Cross Site Scripting (XSS) Vulnerability in iPlanet Messaging Server Messenger Express by "Sun" (01.11.2006)
		paisterist.nst_(at)_gmail.com, PHP-Nuke <= 7.9 Journal module (search.php) "forwhat" SQL Injection vulnerability (01.11.2006)
		mfp.c_(at)_hotmail.com, phpMyConferences <= 8.0.2 Remote File Inclusion (01.11.2006)
		security_(at)_armorize.com, SQL Injection Vulnerability in bfExplorer 0.0.6 (01.11.2006)
		handrix_(at)_gmail.com, Sun java System Messenger Express XSS (01.11.2006)

Discuss:

Read or add your comments to this news (0 comments)