Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		14.06.2008
Source:
SecurityVulns ID:		9083
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		VBULLETIN : vBulletin 3.6
		PHPRIDER : phpRaider 1.0
		VBULLETIN : vBulletin 3.7
		FLATCALENDAR : Flat Calendar 1.1
		PARIDEL : Pooya Site Builder 6.0

Original document		Jessica Hope, Exploit for vBulletin "obscure" XSS (3.7.1 & 3.6.10) (14.06.2008)
		admin_(at)_bugreport.ir, Pooya Site Builder (PSB) SQL Injection Vulnerabilities (14.06.2008)
		Jose Luis Góngora Fernández, ASPPortal Free Version (Topic_Id) Remote SQL Injection Vulnerability (14.06.2008)
		laurent gaffié, Flat Calendar v1.1 Remote Permission Bypass Vulnerability (14.06.2008)
		laurent gaffié, phpRaider <= v1.0.6,7 Maybe Other Versions Remote File include Vulnerable (14.06.2008)

Discuss:

Read or add your comments to this news (0 comments)