Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) updated since 05.05.2006
Published:		05.05.2006
Source:
SecurityVulns ID:		6091
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PUNBB : PunBB 1.2
		WEBCALENDAR : WebCalendar 1.0
		FASTCLICK : Fast Click 2.3
		BIGWEBMASTER : Bigwebmaster Guestbook 1.02
		UAPPLICATION : UBlog 1.6
		321SOFT : 321soft PhP Gallery 0.9

Original document		David Maciejak, [Full-disclosure] WebCalendar User Account Enumeration Weakness (05.05.2006)
		o.y.6_(at)_hotmail.com, PunBB 1.2.11 Cross-Site Scripting (05.05.2006)
		aminrayden_(at)_yahoo.com, Fast Click SQL Lite <= 1.1.3 Remote File Inclusion (05.05.2006)
		aminrayden_(at)_yahoo.com, Fast Click <= 2.3.8 Remote File Inclusion (05.05.2006)
		d4igoro_(at)_gmail.com, 321soft PhP Gallery 0.9 - directory travel & XSS (05.05.2006)
		Javor Ninov, bigwebmaster guestbook multiply XSS (05.05.2006)
		omnipresent_(at)_email.it, UBlog Remote XSS Exploit (05.05.2006)
		omnipresent_(at)_email.it, Cute Guestbook Remote XSS Exploit (05.05.2006)

Discuss:

Read or add your comments to this news (0 comments)