Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		05.02.2009
Source:
SecurityVulns ID:		9649
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHPSLASH : phpslash 0.8
		BUGZILLA : Bugzilla 3.0
		MOZILLA : Bugzilla 3.2
		BUGZILLA : Bugzilla 3.3
		SIMPLEMACHINES : Simple Machines Forum 1.17
		RGBOARD : rgboard 4
		METABBS : Metabbs 0.11

Original document		blabla-34, flatnux Flatnux-2009-01-27 Remote File Include (05.02.2009)
		make0day_(at)_gmail.com, metabbs 0.11 Change admin password vulnerability (05.02.2009)
		gmdarkfig_(at)_gmail.com, phpslash <= 0.8.1.1 Remote Code Execution Exploit (05.02.2009)
		make0day_(at)_gmail.com, rgboard v4 (07.07.27) Multiple Vulnerability (05.02.2009)
		Eduardo Vela, SMF 1.1.7 Persistent XSS (requires permision to edit censor) (05.02.2009)
		BUGZILLA, Security Advisory for Bugzilla 3.2.1, 3.0.7, and 3.3.2 (05.02.2009)

Files:		phpslash <= 0.8.1.1 Remote Code Execution Exploit
		Exploits metabbs 0.11 Change admin password vulnerability
Discuss:		Read or add your comments to this news (0 comments)