Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		17.12.2009
Source:
SecurityVulns ID:		10479
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		HORDE : Horde 3.3
		CETERACMS : Cetera CMS 2.9
		SITECORE : Sitecore Staging Module 5.4
		QUIXPLORER : QuiXplorer 2.4

Original document		ISecAuditors Security Advisories, [ISecAuditors Security Advisories] QuiXplorer <=2.4.1beta Remote Code Execution vulnerability (17.12.2009)
		ISecAuditors Security Advisories, [ISecAuditors Security Advisories] Horde 3.3.5 "PHP_SELF" Cross-Site Scripting vulnerability (17.12.2009)
		Daniel Fabian, SEC Consult SA-20091217-0 :: Authentication bypass and file manipulation in Sitecore Staging Module (17.12.2009)
		MustLive, Vulnerabilities in Cetera CMS (17.12.2009)

Discuss:

Read or add your comments to this news (0 comments)