Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		28.11.2006
Source:		BUGTRAQ
SecurityVulns ID:		6865
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		DISCUZ : Discuz! 4.0
		CUBECART : CubeCart 3.0
		PHPGEDVIEW : PhpGedView 4.0
		MBOARD : MBoard 1.22
		UAPPLICATION : Uphotogallery 1.1
		REMLAB : REMLAB Web Mech Designer 2.0
		FLYSPRAY : flyspray 1.0
		PHPBB : Hacks List phpBB Mod 1.1

Original document		the master, Admin Hacks List v1.20 Remote SQL Injection Vulnerability (28.11.2006)
		Dr Max Virus, com_flyspray Mambo Com. <= 1.0.1 Remote File Disclosure Vulnerability (28.11.2006)
		Jesper Jurcenoks, [Full-disclosure] REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability (28.11.2006)
		Nicholas Williams, [Full-disclosure] CubeCart <=3.0.14 Bind Sql Injection POC. (28.11.2006)
		Advisory_(at)_Aria-Security.net, ClickContact SQL Injection (28.11.2006)
		Advisory_(at)_Aria-Security.net, uPhotoGallery (v 1.1) SQL Injection (28.11.2006)
		Mayhemic Labs Security, MHL-2006-003 Public Advisory: "mboard" file creation issue (28.11.2006)
		x___.__(at)_hotmail.com, PhpGedView 4.0.2 (DOCUMENT_ROOT) File inclusion Vulnerablity (28.11.2006)

Files:		Discuz! 4.x SQL injection / admin credentials disclosure exploit
		CubeCart <=3.0.14 Bind Sql Injection POC
Discuss:		Read or add your comments to this news (0 comments)