Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		04.03.2009
Source:
SecurityVulns ID:		9707
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		NOVABOARD : NovaBoard 1.0
		CBBLOG : BlindBlog 1.3
		ZABBIX : Zabbix 1.6
		BLOGSA : Blogsa 1.0
		RITSBLOG : RitsBlog 0.4
		EXTPLORER : eXtplorer 2.0

Original document		ISecAuditors Security Advisories, [ISecAuditors Security Advisories] eXtplorer Remote Code Execution (04.03.2009)
		Salvatore "drosophila" Fresta, RitsBlog 0.4.2 (Authentication Bypass) SQL Injection Vulnerability / XSS Persistent Vulnerability (04.03.2009)
		contact_(at)_onuryilmaz.info, Blogsa <= 1.0 Beta 3 XSS Vulnerability (04.03.2009)
		ascii, Zabbix 1.6.2 Frontend Multiple Vulnerabilities (04.03.2009)
		Salvatore "drosophila" Fresta, WARNING - CORRECT: BlindBlog 1.3.1 Multiple Vulnerabilities (SQL Inj - Auth Bypass - LFI) (04.03.2009)
		Salvatore "drosophila" Fresta, BlindBlog 1.3.1 Multiple Vulnerabilities (SQL Inj - Auth Bypass - LFI) (04.03.2009)
		Jose Luis, NovaBoard <= 1.0.1 / XSS Vulnerability (04.03.2009)

Discuss:

Read or add your comments to this news (0 comments)