Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		21.12.2006
Source:
SecurityVulns ID:		6964
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		VALDERSOFT : Valdersoft Shopping Cart 3.0
		POWERSCRIPTS : PowerClan 1.14
		MONO : mono 1.2
		CALACODE : @Mail 4.51
		PHPBUILDER : PHPBuilder 0.0
		NEWXOOPER : Newxooper 0.9
		PGMRELOADED : PgmReloaded 0.8
		TEXTSEND : TextSend 1.5

Original document		bilkopat_(at)_hotmail.com, Valdersoft Shopping Cart v3.0 (E-Commerce Software)*****[ commonIncludePath ] Remote File Include (21.12.2006)
		nuffsaid, TextSend <= 1.5 (config/sender.php) Remote File Include Vulnerability (21.12.2006)
		nuffsaid, PowerClan <= 1.14a (footer.inc.php) Remote File Include Vulnerability (21.12.2006)
		nuffsaid, PgmReloaded <= 0.8.5 Multiple Remote File Include Vulnerabilities (21.12.2006)
		Dr Max Virus, Newxooper-php v0.9.1(chemin) Remote File Include Vulnerabilty (21.12.2006)
		the master, PHPBuilder v0.0.2 Remote File Disclosure Vulnerability (21.12.2006)
		Netragard Security Advisories, [Full-disclosure] [NETRAGARD-20061220 SECURITY ADVISORY] [@Mail WebMail Cross Site Scripting Vulnerabilitity] (21.12.2006)
		jose.palanco_(at)_eazel.es, Mono XSP ASP.NET Server sourcecode disclosure vulnerability (21.12.2006)

Discuss:

Read or add your comments to this news (0 comments)