Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		17.01.2010
Source:
SecurityVulns ID:		10522
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		FCKEDITOR : FCKeditor 2.6
		MYDMS : MyDMS 1.7
		DRUPAL : Node Blocks 1.1 module for Drupal
		DRUPAL : Node Blocks 1.3 module for Drupal

Original document		Marty Barbella, XSS Vulnerability in Drupal's Node Blocks contributed module (6.x-1.3 and 5.x-1.1) (17.01.2010)
		Daniel Fabian, SEC Consult SA-20100115-0 :: Local file inclusion/execution and multiple CSRF vulnerabilities in LetoDMS (formerly MyDMS) (17.01.2010)
		MustLive, New vulnerability in FCKeditor (17.01.2010)
		Ronen Z, Cross Site Identification (CSID) attack. Description and demonstration. (17.01.2010)

Discuss:

Read or add your comments to this news (0 comments)