Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		20.03.2008
Source:
SecurityVulns ID:		8806
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		EASYCLANPAGE : Easy-Clanpage 2.2
		VIEWVC : ViewVC 1.05
CVE:		CVE-2008-1292
		CVE-2008-1291
		CVE-2008-1290

Original document		GENTOO, [ GLSA 200803-29 ] ViewVC: Multiple vulnerabilities (20.03.2008)
		info_(at)_shadowturk.org, Easy-Clanpage 2.2 (id) Remote SQL Injection Vulnerability (20.03.2008)
		Jose Luis Góngora Fernández, KAPhotoservice (album.asp) Remote SQL Injection Exploit (20.03.2008)
		Charles "real" F., PEEL CMS Admin Hash Extraction and Remote Upload (20.03.2008)

Files:		Exploits PEEL CMS Admin Hash Extraction and Remote Upload
		KAPhotoservice - Remote SQL Injection Exploit
Discuss:		Read or add your comments to this news (0 comments)