Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) updated since 01.04.2008
Published:		01.04.2008
Source:		BUGTRAQ
SecurityVulns ID:		8850
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		NUKEDKLAN : Nuked-Klan 1.7
		AURACMS : AuraCMS 2.0
		AURACMS : AuraCMS 2.1
		AURACMS : AuraCMS 2.2
		EFESTECH : Efestech video 5.0

Original document		Charles "real" F., Nuked-Klan <= 1.7.6 Multiple Vulnerabilities Exploit (01.04.2008)
		joseph.giron13_(at)_gmail.com, Terracotta Personal Edition Multiple vulnerabilities (01.04.2008)
		joseph.giron13_(at)_gmail.com, cevado technologies real estate CMS SQL injection (01.04.2008)
		Dj_ReMix_20_(at)_hotmail.com, Efestech Video v5,0 (id) Remote Sql Injection (01.04.2008)
		nebelfrost23_(at)_web.de, Proviso SiteKiosk File Download Vulnerability (01.04.2008)
		r57blg_(at)_gmail.com, AuraCMS 2.x (user.php) - Security Code Bypass & Add Administrator Exploit (01.04.2008)

Files:		Nuked-Klan <= 1.7.6 Multiple Vulnerabilities Exploit
		AuraCMS 2.x (user.php) - Security Code Bypass & Add Administrator Exploit
		Multiple Remote Vulnerabilities (SQL Injection Exploit/XSS/LFI)
Discuss:		Read or add your comments to this news (0 comments)