Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		03.05.2008
Source:
SecurityVulns ID:		8966
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		BLUR6EX : blur6ex 0.3
		LIVECART : LiveCart 1.1
		SITEXS : sitexs 0.1
CVE:		CVE-2008-1750 (SQL injection vulnerability in Integry Systems LiveCart 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to the /category URI.)

Original document		hadikiamarsi_(at)_hotmail.com, SiteXS CMS Remote File Upload Vulnerability (03.05.2008)
		LIVECART, Fixed: LiveCart SQL injection vulnerability fixed since version 1.1.2 (03.05.2008)
		hadihadi_zedehal_2006_(at)_yahoo.com, blur6ex-0.3.462 LOCAL FILE INCLUSION Vulnerbility (03.05.2008)

Files:		Exploits SiteXS CMS Remote File Upload Vulnerability
Discuss:		Read or add your comments to this news (0 comments)