Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		10.08.2009
Source:
SecurityVulns ID:		10134
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Dumb math captcha: protection bypass backdoor.

Affected:		SQLITEMANAGER : SQLiteManager 1.2
		WORDPRESS : Dumb math captcha 1.0
		PAPOOCMS : Papoo CMS 3.7
		KAYAKO : Kayako SupportSuite 3.50
		SPICEWORKS : Spiceworks 3.6

Original document		Adam Baldwin, [NGENUITY] - Spiceworks Multiple Vulnerabilities (XSS & CSRF) (10.08.2009)
		Adam Baldwin, [NGENUITY] - Ticket Subject Persistent XSS in Kayako SupportSuite (10.08.2009)
		RedTeam Pentesting, [RT-SA-2009-005] Papoo CMS: Authenticated Arbitrary Code Execution (10.08.2009)
		hadikiamarsi_(at)_hotmail.com, XSS in SqLiteManager (10.08.2009)
		MustLive, Vulnerability in Dumb math captcha for WordPress (10.08.2009)

Discuss:

Read or add your comments to this news (0 comments)