Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) updated since 02.12.2007
Published:		02.12.2007
Source:
SecurityVulns ID:		8397
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. WP-ContactForm: CAPTCHA bypass and XSS.

Affected:		BYTEHOARD : bytehoard 2.1
		WORDPRESS : WP-ContactForm 2.0

Original document		Ernesto Alvarez, [Full-disclosure] two bytehoard bugs (02.12.2007)
		MustLive, MoBiC-29 Bonus: XSS in WP-ContactForm (02.12.2007)
		MustLive, MoBiC-29: WP-ContactForm CAPTCHA bypass (02.12.2007)

Discuss:

Read or add your comments to this news (0 comments)