Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		28.12.2007
Source:
SecurityVulns ID:		8506
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. WordPress: DoS, crossite scripting, arbitrary files deletion.

Affected:		WORDPRESS : WordPress 2.0
		JOOMLA : Joomla 1.0
		OPENBIBLIO : OpenBiblio 0.5
		JOOMLA : Joomla 1.5
		2ZPROJECT : 2z project 0.9

Original document		Digital Security Research Group [DSecRG], 2z-project 0.9.6.1 Multiple Security Vulnerabilities (28.12.2007)
		Juan Galiana, [Full-disclosure] FAQMasterFlexPlus multiple vulnerabilities (28.12.2007)
		Juan Galiana, [Full-disclosure] OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities (28.12.2007)
		Zinho, [HSC Security Group] Multiple CSRF in Joomla all versions - Complete compromise (28.12.2007)
		MustLive, Directory traversal, Arbitrary file deletion, DoS and XSS in WordPress (28.12.2007)

Discuss:

Read or add your comments to this news (0 comments)