Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		10.12.2006
Source:
SecurityVulns ID:		6908
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		KDLAND : KDPics 1.16
		PRONEWS : ProNews 1.5
		SCRIPTHP : Messageriescripthp 2.0
		SCRIPTHP : AnnonceScriptHP 2.0
		MXBB : mxBB Module Profile Control Panel 0.91

Original document		bd0rk_(at)_hackermail.com, mxBB Module Profile Control Panel 0.91c Remote File Include Vulnerability (10.12.2006)
		Hagbard Celine, [Full-disclosure] DadaIMC default configuration vulnerability (10.12.2006)
		Mr_KaLiMaN, AnnonceScriptHP V2.0 Multiple Vulnerabilities (10.12.2006)
		Mr_KaLiMaN, Messageriescripthp V2.0 XSS & SQL Injection (10.12.2006)
		Mr_KaLiMaN, ProNews V1.5 XSS & SQL Injection (10.12.2006)
		Mr_KaLiMaN, KDPics Multiple Vulnerabities (10.12.2006)

Files:		TorrentFlux 2.2 Database Credentials Exposure Exploit
		TorrentFlux 2.2 Command Execution Exploit
Discuss:		Read or add your comments to this news (0 comments)