Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		18.08.2008
Source:		BUGTRAQ
SecurityVulns ID:		9228
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. WP-ContactForm for WordPress: Spamming, Envolution: crossite scripting, informaiton leak.

Affected:		TURNKEYWEBTOOLS : PHP Live Helper 2.0
		MAMBO : Mambo 4.6
		WORDPRESS : WP-ContactForm 2.0
		ENVOLUTION : Envolution 1.2
		FLEXCMS : FlexCMS 2.5
		MUNKI : munky-bliki 0.01
		NEWSHOWLER : NewsHOWLER 1.03
		OPENFREEWAY : Freeway eCommerce 1.4

Original document		Digital Security Research Group [DSecRG], [DSECRG-08-036] Multiple Security Vulnerabilities in Freeway eCommerce 1.4.1.171 (18.08.2008)
		r3d.w0rm_(at)_yahoo.com, NewsHOWLER 1.03 Beta Cookie Handling Via Sql injection (18.08.2008)
		JeiAr, PHP Live Helper <= 2.0.1 Multiple Vulnerabilities (18.08.2008)
		r3d.w0rm_(at)_yahoo.com, munky-bliki lfi (18.08.2008)
		irancrash_(at)_gmail.com, Mambo 4.6.2 Full Version - Multiple Cross Site Scripting - By Khashayar Fereidani (18.08.2008)
		irancrash_(at)_gmail.com, FlexCMS <= 2.5 Cross Site Scripting Vulnerability (18.08.2008)
		Alemin_Krali Krali, Vbulletin Plugin ChatBox Xss Vulnerability (18.08.2008)
		MustLive, Abuse of Functionality vulnerability in WP-ContactForm for WordPress (18.08.2008)
		MustLive, Vulnerabilities in Envolution (18.08.2008)

Files:		Exploits munky-bliki Lfi
Discuss:		Read or add your comments to this news (0 comments)