Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
news
/
advisories
/
forum
/
software
/
advertising
/
search
/
exploits
[EN]
securityvulns.ru
no-pyccku
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:
20.04.2009
Source:
BUGTRAQ
SecurityVulns ID:
9858
Type:
remote
Level:
5
/10
Description:
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.
Affected:
LCMS
:
LittleCMS 1.18
CLANTIGER
:
Clantiger 1.1
MLECSPHP
:
Multi-lingual E-Commerce System 0.2
SUNGARD
:
Banner Student System 7.4
WYSGUI
:
WysGui CMS 1.2
CREASITO
:
creasito e-commerce content manager 1.3
CVE:
CVE-2009-0793
CVE-2009-0733
CVE-2009-0723
CVE-2009-0581
Original document
Salvatore "drosophila" Fresta
,
Creasito e-commerce content manager Authentication Bypass
(
20.04.2009
)
y3nh4ck3r_(at)_gmail.com
,
Multiple Remote Vulnerabilities--SQLi-(INSECURE-COOKIE-HANDLING)-LFI-->
(
20.04.2009
)
y3nh4ck3r_(at)_gmail.com
,
WysGui CMS 1.2 BETA(Insecure Cookie Handling)--Blind-sql-injection-exploit-->
(
20.04.2009
)
reportback_(at)_readthepost.com
,
Sungard Banner System XSS
(
20.04.2009
)
Salvatore "drosophila" Fresta
,
Multi-lingual E-Commerce System 0.2 Multiple Remote Vulnerabilities
(
20.04.2009
)
y3nh4ck3r_(at)_gmail.com
,
CLAN TIGER CMS 1.1.1 (AUTH BYPASS) SQL-INJECTION
(
20.04.2009
)
GENTOO
,
[ GLSA 200904-19 ] LittleCMS: Multiple vulnerabilities
(
20.04.2009
)
Files:
Exploits WysGui CMS 1.2 BETA(cookie) BSQL
Discuss:
Read or add your comments to this news (0 comments)
About
|
Terms of use
|
Privacy Policy
©
SecurityVulns
,
3APA3A
, Vladimir Dubrovin
Nizhny Novgorod
Enter your search terms
Web
securityvulns.com
Submit search form