Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		10.09.2009
Source:
SecurityVulns ID:		10224
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		XAPIANOMEGA : xapian-omega 0.9
		XAPIANOMEGA : xapian-omega 1.0
		CHARTDIR : ChartDirector 5.0
		NULLAM : Nullam Blog 0.1
		THTBMANAGER : T-HTB Manager 0.5
		TINYBROWSER : TinyBrowser 1.41
CVE:		CVE-2009-2947 (Cross-site scripting (XSS) vulnerability in Xapian Omega before 1.0.16 allows remote attackers to inject arbitrary web script or HTML via unspecified CGI parameter values, which are sometimes included in exception messages.)

Original document		MustLive, Arbitrary File Upload vulnerability in TinyBrowser (10.09.2009)
		Salvatore "drosophila" Fresta, T-HTB Manager Mutiple Blind SQL Injection (10.09.2009)
		Salvatore "drosophila" Fresta, Nullam Blog Multiple Remote Vulnerabilities (10.09.2009)
		DokFLeed, [Advisory] ChartDirector Critical File Access (10.09.2009)
		DEBIAN, [SECURITY] [DSA 1882-1] New xapian-omega packages fix cross-site scripting (10.09.2009)

Discuss:

Read or add your comments to this news (0 comments)