Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		25.04.2007
Source:		BUGTRAQ
SecurityVulns ID:		7633
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		DCPPORTAL : DCP-Portal 6.1
		WORDPRESS : WordPress 2.1
		PLOGGER : Plogger 2.0
		PROGRESS : Webspeed 3.1
		LABS4 : HTMLeditbox 2.2
		PROACTECH : netbingo 2000
		DYNATRACKER : DynaTracker 1.5

Original document		alijsb_(at)_yahoo.com, netbingo v 2000 >> RFI (25.04.2007)
		alijsb_(at)_yahoo.com, HTMLeditbox & 2.2 >> RFI (25.04.2007)
		s433d_only_linux_(at)_yahoo.de, WordPress v2.1.3 >> remote file include~ (25.04.2007)
		alijsb_(at)_yahoo.com, HYIP Manager Pro Script >> Remote file Include (25.04.2007)
		alijsb_(at)_yahoo.com, MyNewsGroups >> RFI in include.php (25.04.2007)
		suresync_(at)_gmail.com, Progress Webspeed exploit for all releases (25.04.2007)
		Irene Abezgauz, Security Advisory: CA CleverPath SQL Injection (25.04.2007)
		s433d_only_linux_(at)_yahoo.de, dcp-portal v611 >> RFi (25.04.2007)
		Aesthetico, [MajorSecurity Advisory #46]Plogger - Session fixation Issue (25.04.2007)
		okan alp, Ahhp(php)-Portal Remote File Inclusion (25.04.2007)

Discuss:

Read or add your comments to this news (0 comments)