Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		22.05.2007
Source:		BUGTRAQ
SecurityVulns ID:		7731
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		JETBOX : Jetbox CMS 2.1
		PHPEXPLORATOR : phpexplorator 2.0
		SIMPGB : SimpGB 1.46
		SAXON : Simple Accessible XHTML Online News 4.6
CVE:		CVE-2007-2685 (Multiple SQL injection vulnerabilities in index.php in Jetbox CMS 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) login parameter.)

Original document		tchouamou_(at)_gmail.com, Remedy for: Remot File Include In phpexplorator_2_0 (22.05.2007)
		securityresearch_(at)_netvigilance.com, Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities (22.05.2007)
		the_3dit0r_(at)_yahoo.com, Simple Accessible XHTML Online News v4.6 Remote File Include Exploit (22.05.2007)
		the_3dit0r_(at)_yahoo.com, SimpGB v1.46.0 Remote File Include Exploit (22.05.2007)

Files:		SAXON v4.6 Remote File Include Exploit
		SimpGB v1.46.0 Remote File Include Exploit
Discuss:		Read or add your comments to this news (0 comments)