Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		26.06.2008
Source:
SecurityVulns ID:		9112
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PHP-Nuke: Crossite Scripting. ExpressionEngine: Crossite scripting.

Affected:		IDEABOX : IdeaBox 1.1
		PHPNUK : PHP-Nuke 8.1
		MCGUESTBOOG : mcGuestbook 1.2
		PHPNUKE : PHP-Nuke 7.7
		EXPRESSIONENGINE : ExpressionEngine 1.3
		DBOORN : Relative Real Estate Systems 3.0
		TIETOENATOR : Procapita 840

Original document		tan_prathan_(at)_hotmail.com, The Rat CMS (SQL/XSS) Multiple Remote Vulnerabilities (26.06.2008)
		pelzi_(at)_pelzi.net, Multiple vulnerabilities in TietoEnator's Procapita school administration system, at least version "842 Procapita 840SP1" (26.06.2008)
		adv_(at)_e-rdc.org, [ECHO_ADV_99$2008] Relative Real Estate Systems <= 3.0 (listing_id) Sql Injection Vulnerability (26.06.2008)
		Ghost hacker, RSS-aggregator (display) Remote File Inclusion Vulnerability (26.06.2008)
		Ghost hacker, IdeBox (include) Remote File Inclusion Vulnerability (26.06.2008)
		Ghost hacker, mcGuestbook 1.2 (lang) Remote File Inclusion Vulnerability (26.06.2008)
		MustLive, Cross-Site Scripting vulnerability in ExpressionEngine (26.06.2008)
		MustLive, Cross-Site Scripting vulnerabilities in PHP-Nuke (26.06.2008)

Discuss:

Read or add your comments to this news (0 comments)