Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) updated since 23.07.2010
Published:		28.07.2010
Source:
SecurityVulns ID:		11011
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		COWIKI : coWiki 0.3
		JOOMLA : Joomla 1.5
		VBULLETIN : vBulletin 3.8
		CETERA : Cetera eCommerce 14.0
		YACK : YACK CMS 10.5
		SPITFIRE : Spitfire 1.0
		NOVELL : Teaming 2.1
		TOUGHTOMATO : TTVideo 1.0
		PHPKIT : PHPKIT WCMS 1.6
		THEETA : Theeta CMS 0.0
		SYNDEOCMS : SyndeoCMS 2.9
		MCCONTENTMANAGER : MC Content Manager 10.1
		WHITEBOARD : WhiteBoard 0.1
		JOOMLA : PhotoMap Gallery 1.6
		JOOMLA : Appointinator 1.0
CVE:		CVE-2010-2773

Original document		Salvatore "drosophila" Fresta, PhotoMap Gallery 1.6.0 Joomla Component Multiple Blind SQL Injection (28.07.2010)
		MustLive, New vulnerabilities in Cetera eCommerce (28.07.2010)
		Salvatore "drosophila" Fresta, WhiteBoard 0.1.30 Multiple Blind SQL Injection Vulnerabilities (28.07.2010)
		MustLive, Multiple vulnerabilities in MC Content Manager (28.07.2010)
		eidelweiss randy, DM Filemanager (fckeditor) Remote Arbitrary File Upload Exploit (28.07.2010)
		advisory_(at)_htbridge.ch, XSS vulnerability in SyndeoCMS (28.07.2010)
		advisory_(at)_htbridge.ch, SQL injection vulnerability in Theeta CMS (28.07.2010)
		advisory_(at)_htbridge.ch, XSS vulnerability in SyndeoCMS (28.07.2010)
		advisory_(at)_htbridge.ch, XSS vulnerability in Theeta CMS (28.07.2010)
		advisory_(at)_htbridge.ch, XSS vulnerability in SyndeoCMS (28.07.2010)
		advisory_(at)_htbridge.ch, XSS vulnerability in Theeta CMS (28.07.2010)
		advisory_(at)_htbridge.ch, XSS vulnerability in Theeta CMS (28.07.2010)
		david.kurz_(at)_majorsecurity.net, [MajorSecurity SA-079]PHPKIT WCMS - Multiple stored Cross Site Scripting Issues (28.07.2010)
		Salvatore "drosophila" Fresta, TTVideo 1.0 Joomla Component SQL Injection Vulnerability (28.07.2010)
		ZDI, ZDI-10-136: Novell Teaming ajaxUploadImageFile Remote Code Execution Vulnerability (23.07.2010)
		Andrea Barisani, [oCERT-2010-002] Joomla input sanitization errors (XSS) (23.07.2010)
		MustLive, SQL Injection vulnerability in coWiki (23.07.2010)
		advisories_(at)_intern0t.net, XSS vulnerability in Spitfire search (23.07.2010)
		advisories_(at)_intern0t.net, XSS vulnerability in Spitfire (23.07.2010)
		advisories_(at)_intern0t.net, XSS vulnerability in Spitfire (23.07.2010)
		advisories_(at)_intern0t.net, XSS vulnerability in Spitfire (23.07.2010)
		advisories_(at)_intern0t.net, XSS vulnerability in Spitfire (23.07.2010)
		advisories_(at)_intern0t.net, vBulletin - Critical Information Disclosure (23.07.2010)
		eidelweiss randy, YACK CMS 10.5.27 Remote File Inclusion Vulnerability (23.07.2010)

Files:		DM Filemanager (fckeditor) Remote Arbitrary File Upload Exploit
Discuss:		Read or add your comments to this news (0 comments)