Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		16.12.2006
Source:
SecurityVulns ID:		6945
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		MAXIASP : Contra Haber Sistemi 1.0
		EXTREMEFUSION : eXtreme-fusion 4.02
		BANDWEBSITE : Bandwebsite 1.5
		MXBB : mxBB Module WebLinks 2.05
		MXBB : mxBB Module Charts 1.0
		MXBB : mxBB Module Meeting 1.1

Original document		ajannhwt_(at)_hotmail.com, mxBB Module Meeting <= 1.1.2(meeting_constants.php) Remote File Include (16.12.2006)
		ajannhwt_(at)_hotmail.com, mxBB Module Charts <= 1.0.0(module_root_path) Remote File Include Vulnerability (16.12.2006)
		ajannhwt_(at)_hotmail.com, mxBB Module WebLinks <= 2.05(mx_root_path) Remote File Include Vulnerability (16.12.2006)
		Hackers Center Security Group, [HSC Security Group] SiteCatalyst Web Login Cross Site Vulrnabilities (16.12.2006)
		ShaFuq31_(at)_HoTMaiL.CoM, Contra Haber Sistemi v1.0 SqL Injection Vuln. (16.12.2006)
		ShaFuq31_(at)_HoTMaiL.CoM, Doğantepe Ziyareti Defteri (tr) Sql Injection Vuln. (16.12.2006)

Files:		extreme-fusion <= 4.02 Remote Code Execution Exploit
Discuss:		Read or add your comments to this news (0 comments)