Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) updated since 06.08.2007
Published:		07.08.2007
Source:
SecurityVulns ID:		8008
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		SNIF : Snif 1.5
		ALATHKAR : AL-Athkar 2.0
		ALCARICATIER : AL-Caricatier 2.5
		ENVOLUTION : Envolution 1.1
		EZPHOTOSALES : EZPhotoSales 1.9
		CSAM : C-SAM oneWallet 210_07062007

Original document		tusharvartak_(at)_hotmail.com, C-SAM oneWallet forget password Cross Site Scripting vulnerability (07.08.2007)
		r0t, VisionProject Multiple XSS vuln. (07.08.2007)
		Seth Fogie, EZPhotoSales 1.9.3 Multiple Vulnerabilities (07.08.2007)
		nima_501_(at)_yahoo.com, PHP mSQL (msql_connect) Buffer Overflow PoC (07.08.2007)
		k1tk4t_(at)_newhack.org, Envolution (News) <= v1.1.0 Remote SQL Injection (06.08.2007)
		k1tk4t_(at)_newhack.org, AuraCMS [Forum Module] - Remote SQL Injection (06.08.2007)
		RaeD Hasadya, ALL vgallite Remote File Include (06.08.2007)
		RaeD Hasadya, AL-Caricatier V.2.5 Remote File Include (06.08.2007)
		RaeD Hasadya, AL-Athkar.v2.0 Remote File Include (06.08.2007)
		r0t, Snif vuln. (06.08.2007)

Files:		Exploits Envolution <= v1.1.0 Remote SQL Injection
Discuss:		Read or add your comments to this news (0 comments)