Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		10.06.2008
Source:
SecurityVulns ID:		9068
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		INSANELYSIMPLE : Insanely Simple Blog 0.5
		TORNADO : Tornado Knowledge Retrieval System 4.2
		ERFURTWIKI : ErfurtWiki 1.02
		DCFMBLOG : DCFM Blog 0.9
		YBLOG : yBlog 0.2

Original document		Eduardo Jorge, XSS - Glassfish Web Admin Interface (Sun Java System Application Server 9.1_01 (build b09d-fcs) ) (10.06.2008)
		unohope_(at)_chroot.org, [web-app] DCFM Blog 0.9.4 (comments) Remote SQL Injection Vulnerability (10.06.2008)
		unohope_(at)_chroot.org, [web-app] Insanely Simple Blog 0.5 (index) Remote SQL Injection Vulnerabilities (10.06.2008)
		unohope_(at)_chroot.org, [web-app] yBlog 0.2.2.2 Multiple Remote Vulnerabilities (10.06.2008)
		unohope_(at)_chroot.org, [web-app] DCFM Blog 0.9.4 (comments) Remote SQL Injection Vulnerability (10.06.2008)
		unohope_(at)_chroot.org, [web-app] ErfurtWiki <= R1.02b (css) Local File Inclusion Vulnerability (10.06.2008)
		unohope_(at)_chroot.org, [web-app] Tornado Knowledge Retrieval System <= 4.2 Remote XSS Vulnerability (10.06.2008)

Discuss:

Read or add your comments to this news (0 comments)