Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) updated since 13.09.2008
Published:		14.09.2008
Source:
SecurityVulns ID:		9283
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		JOOMLA : Joomla 1.5
		EZPHTOGALLERY : Ezphotogallery 2.1
		PHPWEBGALLERY : PhpWebGallery 1.3
		PHSBLOG : PhsBlog 0.2
		MINB : minb 0.1
		WORDPRESS : Wordpress 2.6

Original document		Marc Ruef, [scip_Advisory 3809] Pro2col StingRay FTS login username cross site scripting (14.09.2008)
		Stefan Esser, Advisory 05/2008: Wordpress user_login Column SQL Truncation Vulnerability (13.09.2008)
		Stefan Esser, Advisory 04/2008: Joomla Weak Random Password Reset Token Vulnerability (13.09.2008)
		Advisory 04/2008: Joomla Weak Random Password Reset Token Vulnerability, Advisory 04/2008: Joomla Weak Random Password Reset Token Vulnerability (13.09.2008)
		irancrash_(at)_gmail.com, Nooms 1.1 (13.09.2008)
		r3d.w0rm_(at)_yahoo.com, minb Remote Code Execution Exploit (13.09.2008)
		irancrash_(at)_gmail.com, PhsBlog v0.2 Bypass Sql injection Filtering Exploit (13.09.2008)
		irancrash_(at)_gmail.com, PhpWebGallery 1.3.4 Multiple Vulnerabilities (XSS/LFI) (13.09.2008)

Files:		Exploits Ezphotogallery Multiple Vulnerabilities ( Xss/Login Bypass/Sql injection Exploit/File Disclosure)
		PhsBlog Bypass Sql injection Filtering Exploit
		minb Remote Code Execution Exploit
Discuss:		Read or add your comments to this news (0 comments)