Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		11.12.2006
Source:		BUGTRAQ
SecurityVulns ID:		6913
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		SQUIRRELMAIL : Squirrelmail 1.4
		RANDSHOP : randshop 1.2
		B2EVOLUTION : b2evolution 1.8
		PHPALBUM : phpAlbum 0.4
		DRUPAL : Drupal Help Tip Module 4.7
		DRUPAL : Drupal Chatroom Module 4.7
		MESSAGERIESCRIPT : Messageriescripthp 2.2
		PHPLEAGUE : PhpLeague 0.81

Original document		SECUNIA, [SA23342] PhpLeague "cheminmini" File Inclusion Vulnerabilities (11.12.2006)
		SECUNIA, [SA23319] Messageriescripthp SQL Injection and Cross-Site Scripting (11.12.2006)
		MANDRIVA, [ MDKSA-2006:226 ] - Updated squirrelmail packages fix vulnerabilities (11.12.2006)
		SECUNIA, [SA23346] b2evolution "inc_path" File Inclusion Vulnerability (11.12.2006)
		SECUNIA, [SA23343] Drupal Chatroom Module Session ID Information Disclosure (11.12.2006)
		SECUNIA, [SA23295] Drupal Help Tip Module Multiple Vulnerabilities (11.12.2006)
		hazer.cft_(at)_gmail.com, множественные уязвимости в randshop 1.2 (11.12.2006)

Files:		phpAlbum <= v0.4.1 Beta6 Remote Code Execution Exploit
Discuss:		Read or add your comments to this news (0 comments)