Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		19.06.2008
Source:
SecurityVulns ID:		9098
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		VBULLETIN : vBulletin 3.6
		VBULLETIN : vBulletin 3.7
		ASPWEBCALENDAR : AspWebCalendar 2008
		TORRENTTRADER : TorrentTrader 1.08
		ELINESTUDIO : eLineStudio Site Composer 2.6
		YEKTAWEB : Academic Web Tools CMS 1.4

Original document		Jessica Hope, vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1: XSS in modcp index (19.06.2008)
		admin_(at)_bugreport.ir, Academic Web Tools CMS <= 1.4.2.8 Multiple Vulnerabilities (19.06.2008)
		admin_(at)_bugreport.ir, eLineStudio Site Composer (ESC) <=2.6 Multiple Vulnerabilities (19.06.2008)
		Alemin_Krali Krali, Secunia Research: TorrentTrader Multiple SQL Injection Vulnerabilities (19.06.2008)
		Alemin_Krali Krali, AspWebCalendar 2008 Remote File Upload Vulnerability (19.06.2008)

Discuss:

Read or add your comments to this news (0 comments)