Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		17.04.2009
Source:
SecurityVulns ID:		9845
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		APACHE : ActiveMQ 5.2
		WEBSPELL : webSPELL 4.2
		PHORUM : Phorum 5.2
		NOVELL : Novell Teaming 1.0

Original document		Daniel Fabian, SEC Consult SA-20090415-0 :: Multiple Vulnerabilities in Novell Teaming (17.04.2009)
		research_(at)_voodoo-labs.org, Phorum < 5.2.10 Cross-Site Scripting/Request Forgery (17.04.2009)
		Nine:Situations:Group, Geeklog <= 1.5.2 savepreferences()/*blocks[] remote sql injection exploit (17.04.2009)
		y3nh4ck3r_(at)_gmail.com, webSPELL 4.2.0c--XSS (BYPASS BBCODE) COOKIES STEALING VULNERABILITY-- (17.04.2009)
		ddvulnalert_(at)_ddifronline.com, DDIVRT-2009-23 Apache ActiveMQ Numerous Cross Site Scripting Issues (17.04.2009)

Files:		Geeklog <= 1.5.2 savepreferences()/*blocks[] remote sql injection exploit
Discuss:		Read or add your comments to this news (0 comments)