Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		10.09.2008
Source:
SecurityVulns ID:		9282
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		HORDE : Horde 3.1
		LEDGERSMB : LedgerSMB 1.2
		STASH : Stash 1.0
		HORDE : Horde 3.2

Original document		Will Drewry, [oCERT-2008-012] Horde, Popoon frameworks common input sanitization errors (XSS) (10.09.2008)
		r3d.w0rm_(at)_yahoo.com, Stash v1.0.3 Admin bypass / Remote File Disclosure (10.09.2008)
		chris.travers_(at)_gmail.com, Multiple Vulnerabilities: LedgerSMB < 1.2.15 (10.09.2008)

Discuss:

Read or add your comments to this news (0 comments)