|
| Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | | Published: |  | 02.01.2008 | | Source: |  | | | SecurityVulns ID: |  | 8513 | | Type: |  | remote | | Level: |  | 5/10 | | Description: |  | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.
WordPress: local file include, directory traversal, files modification and information leak. |
| Affected: |  | WORDPRESS : WordPress 2.0 | | |  | JOOMLA : Joomla 1.0 | | |  | MODXCMS : MODx CMS 0.9 | | |  | JOOMLA : Joomla 1.5 | | |  | BITWEAVER : Bitweaver 2.0 | | |  | LIVECART : LiveCart 1.0 | | |  | PHPWEBSITE : phpWebSite 1.4 |
| Original document |  | admin_(at)_bugreport.ir, Bitweaver source code disclosure, arbitrary file upload (02.01.2008) |
| |  | Jose Luis Góngora Fernández, milliscripts (dir.php) Cross-Site Scripting Vulnerability (02.01.2008) |
| |  | The-0utl4w-noreply_(at)_aria-security.net, Instant Softwares DatingSite SQL Injection (02.01.2008) |
| |  | Zinho, [HSC Security Group] Multiple CSRF in Joomla all versions - Complete compromise (02.01.2008) |
| |  | Audun Larsen, Cross-Site Scripting (XSS) in phpWebSite 1.4.0 search (02.01.2008) |
| |  | admin_(at)_bugreport.ir, MODx CMS Source code disclosure, local file inclusion (02.01.2008) |
| |  | Hackers Center Security Group, LiveCart Multiple Cross-Site Scripting Vulnerabilities (02.01.2008) |
| |  | MustLive, Arbitrary file edit, Local file include, Directory traversal and Full path disclosure in WordPress (02.01.2008) |
| |  | MustLive, Local file include, Directory traversal and Full path disclosure in WordPress (02.01.2008) |
|
|
|
|
|