Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) updated since 21.09.2009
Published:		22.09.2009
Source:
SecurityVulns ID:		10249
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		DAWAWEEN : Dawaween 1.03
		MAMBO : Mambo 4.6
		HORDE : Horde 3.2
		FCKEDITOR : FCKeditor 2.6

Original document		MustLive, XSS and Content Spoofing vulnerabilities in FCKeditor (22.09.2009)
		Paweі Јaskarzewski, Mambo 4.6.3 arbitrary file upload (21.09.2009)
		CrAzY_CrAcKeR_(at)_hotmail.com, rubrique 'rubrique.php' SQL Injection Vulnerability (21.09.2009)
		Dazz.band_(at)_hotmail.com, Dawaween V 1.03 <<----SQL Injection Exploit (21.09.2009)
		Stefan Esser, Advisory 01/2009: Horde_Form_Type_image Arbitrary File Overwrite Vulnerability (21.09.2009)
		MustLive, Vulnerabilities in FileDownload Snippet for MODx (21.09.2009)

Discuss:

Read or add your comments to this news (0 comments)