Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) updated since 09.07.2008
Published:		09.07.2008
Source:
SecurityVulns ID:		9140
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. RavenNuke: CAPTCHA bypass.

Affected:		VBULLETIN : vBulletin 3.7
		RAVENNUKE : RavenNuke 2.20
		PHPNUKE : 4ndvddb module for PHP-Nuke 0.91

Original document		lovebug_(at)_hotmail.it, XSS in admin logs - vBulletin 3.7.2 and lower, vBulletin 3.6.10 PL2 and lower (09.07.2008)
		lovebug_(at)_hotmail.it, PHP-NUKE SQL Module's Name 4ndvddb (09.07.2008)
		MustLive, Insufficient Anti-automation vulnerability in RavenNuke (09.07.2008)

Discuss:

Read or add your comments to this news (0 comments)