Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		02.05.2007
Source:
SecurityVulns ID:		7653
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		SENDCARD : Sendcard 3.4
		GHH : GHH Portal 1.1
		WORDPRESS : myflash 1.00 plugin for WordPress
		WORDPRESS : wp-Table 1.43 module for WordPress
		WORDPRESS : wordTube 1.43 module for WordPress
		PSILABS : psipuss 1.0
		THEMERCHANT : The Merchant 2.2

Original document		eufrato_(at)_gmail.com, [ECHO_ADV_81$2007] wordpress plugins wordTube <= 1.43 (wpPATH) Remote File Inclusion Vulnerability (02.05.2007)
		eufrato_(at)_gmail.com, [ECHO_ADV_82$2007] wordpress plugins wp-Table <= 1.43 (inc_dir) Remote File Inclusion Vulnerability (02.05.2007)
		ettee, Sendcard (sendcard.php) Sendcard Local File Inclusion Vulnerability (02.05.2007)
		crackers_child_(at)_sibersavascilar.com, Wordpress plugin myflash <= V1.00 (wppath) RFI Vulnerability (02.05.2007)
		ilkerKandemir_(at)_mynet.com, E-Annu (home.php) Remote SQL Injection Vulnerability (02.05.2007)
		crazy_king_(at)_eno7.org, GHH Portal 1.1 (passwd.txt) Remote Password Disclosure Vulnerability (02.05.2007)
		suresync_(at)_gmail.com, Flaw in about.r OS and Progress version disclosure (02.05.2007)

Files:		psipuss 1.0 (editusers.php) Remote Change Admin Password Exploit
		2005-2006 The Merchant Project Remote File Include Exploit
Discuss:		Read or add your comments to this news (0 comments)