Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		29.10.2007
Source:		BUGTRAQ
SecurityVulns ID:		8299
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		TIKIWIKI : tikiwiki 1.9
		TEATRO : teatro 1.6
		WORDPRESS : WordPress 2.3
		AGTC : AGTC-Membership 1.1
		SAXON : SAXON 5.4
CVE:		CVE-2007-4863
		CVE-2007-4862
		CVE-2007-4861

Original document		Hackers Center Security Group, Omnistar Live Software Cross-Site Scripting Vulrnability (29.10.2007)
		securityresearch_(at)_netvigilance.com, SAXON version 5.4 Multiple Path Disclosure Vulnerabilities (29.10.2007)
		securityresearch_(at)_netvigilance.com, SAXON version 5.4 SQL Injection Vulnerability (29.10.2007)
		securityresearch_(at)_netvigilance.com, SAXON version 5.4 XSS Attack Vulnerability (29.10.2007)
		Guns_(at)_0x90.com.ar, AGTC-Membership system v1.1a (adduser) Remote Add Admin Exploit (29.10.2007)
		Janek Vind, [waraxe-2007-SA#059] - XSS in WordPress 2.3 (29.10.2007)
		Alkomandoz Hacker, teatro 1.6 ( basePath ) Remote File Include Vulnerability (29.10.2007)
		Stefan Esser, [Full-disclosure] Advisory SE-2007-01: TikiWiki Remote PHP Code Evaluation Vulnerability (29.10.2007)

Discuss:

Read or add your comments to this news (0 comments)