|
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
updated since 25.05.2007 | | Published: |  | 25.05.2007 | | Source: |  | | | SecurityVulns ID: |  | 7737 | | Type: |  | remote | | Level: |  | 5/10 | | Description: |  | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. |
| Affected: |  | BOASTMACHINE : BoastMachine 3.0 | | | | CUBECART : CubeCart 3.0 | | | | JETBOX : Jetbox CMS 2.1 | | | | WORDPRESS : WordPress 2.1 | | | | PSYCHOSTATS : PsychoStats 3.0 | | | | HLSTATS : HLstats 1.35 | | | | CLONUSWIKI : ClonusWiki 0.5 | | | | GMTT : GMTT Music Distro 1.2 | | | | PHPPGADMIN : phpPgAdmin 4.1 | | | | ABC : ABC Excel Parser 4.0 | | | | 2ZPROJECT : 2z project 0.9 | | | | WIYS : WIYS 1.0 | | | | GFORGE : gforge-plugin-scmcvs 4.5 | | CVE: |  | CVE-2007-0246 (plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execute arbitrary commands via shell metacharacters in the PATH_INFO.) |
| Original document |  | DEBIAN, [SECURITY] [DSA 1297-1] New gforge-plugin-scmcvs packages fix arbitrary shell command execution (25.05.2007) |
| | | vagrant Pest, WIYS v1.0 Cross-Site Scripting Vulnerability - (05.24.2007) (NEW) (25.05.2007) |
| | | Janek Vind, [waraxe-2007-SA#051] - Sql Injection in 2z Project 0.9.5 (25.05.2007) |
| | | the_3dit0r_(at)_yahoo.com, ABC Excel Parser Pro v4.0 Remote File Include Exploit (25.05.2007) |
| | | vagrant Pest, BoastMachine v3.0 platinum - Session Ýd Hacking (25.05.2007) |
| | | john_(at)_martinelli.com, RedLevel Advisory #021 - CubeCart v3.0.16 SQL Injection Vulnerability (25.05.2007) |
| | | Cornelius Riemenschneider, SQL-Injection in IP-TRACKING Mod for phpBB2.0.x (25.05.2007) |
| | | the_3dit0r_(at)_yahoo.com, phpPgAdmin-4.1.1 Remote File Include & Url Redirecting Vulnerabilitiy (25.05.2007) |
| | | john_(at)_martinelli.com, RedLevel Advisory #020 - HLstats v1.35 Cross-Site Scripting Vulnerability #3 (25.05.2007) |
| | | john_(at)_martinelli.com, RedLevel Advisory #018 - RM EasyMail Plus - Cross-Site Scripting Vulnerability #2 (25.05.2007) |
| | | CorryL, GMTT Music Distro 1.2 XSS Exploit (25.05.2007) |
| | | john_(at)_martinelli.com, RedLevel Advisory #017 - PsychoStats v3.0.6b Multiple Cross-Site Scripting Vulnerabilities (25.05.2007) |
| | | Janek Vind, [waraxe-2007-SA#050] - Sql Injection in WordPress 2.1.3 (25.05.2007) |
| | | securityresearch_(at)_netvigilance.com, Jetbox CMS version 2.1 XSS Attack Vulnerability (25.05.2007) |
| | | john_(at)_martinelli.com, RedLevel Advisory #022 - ClonusWiki .5 Cross-Site Scripting Vulnerability (25.05.2007) |
|
|
|
|
|
