Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		19.08.2008
Source:
SecurityVulns ID:		9233
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Envolution: crossite scripting, automation protection bypass.

Affected:		ENVOLUTION : Envolution 1.2
		OVIDENTIA : Ovidentia 6.6
		TURNKEYWEBTOOLS : SunShop 4.1
		VANILLA : Vanilla 1.1

Original document		JeiAr, SunShop <= 4.1.4 SQL Injection (19.08.2008)
		JeiAr, Vanilla <= 1.1.4 Script Injection/ XSS (19.08.2008)
		ThE dE@Th, Ovidentia 6.6.5 XSS (index.php)‏ (19.08.2008)
		MustLive, Multiple vulnerabilities in Envolution (19.08.2008)

Discuss:

Read or add your comments to this news (0 comments)