Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		15.09.2009
Source:
SecurityVulns ID:		10239
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		VBULLETIN : vBulletin 3.8
		JOOMLA : Joomla Hotel Booking System III
		RAILS : rails 2.1
CVE:		CVE-2009-3009 (Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrary web script or HTML by placing malformed Unicode strings into a form helper.)

Original document		DEBIAN, [SECURITY] [DSA 1887-1] New rails packages fix cross-site scripting (15.09.2009)
		snip3r ir4Q, vBulletin 3.8.2 Denial of Service Exploit (15.09.2009)
		adv_(at)_e-rdc.org, [ECHO_ADV_111$2009] Joomla Hotel Booking System Component XSS/SQL Injection Multiple Vulnerability (15.09.2009)

Files:		vBulletinR Version 3.8.2 D3n14l 0f S3rv1c3 Expl01t
Discuss:		Read or add your comments to this news (2 comments)

	joomlahbs: Please remove this content  15.09.2009 23:22:27
	Hi there ... full text

		3APA3A: Re: Please remove this content  15.09.2009 23:37:15
		If you believe this information is bogus: http://securityvulns.ru/Wdocument467.html you can release some note to Bugtraq list (as a source of information).

---

Show Threads Messages

Login:* (Register) Password:* (private) To: (reply) Subject:* Text:

Main Forum (Eng) General security questions not appropriate for another forums.	3proxy Forum (Eng) All 3proxy question must be posted to this forum.	Bugs, Vulnerabilities, PoCs and Exploits (Eng) All vulnerability related questions, vulnerability digging and exploit creation.	Windows programming and administration (Eng) Administering Windows and application development.	Unix programming and administation (Eng) Administering Unix and application development.	Test forum Please post all test messages here. All test messages from different forums will be deteted.
Main Forum (Rus)	3proxy Forum (Rus)	Bugs, Vulnerabilities, PoCs and Exploits (Rus)	Windows programming and administration (Rus)	Unix programming and administation (Rus)