Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		01.02.2011
Source:
SecurityVulns ID:		11392
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		ZIKULA : Zikula 1.2
		PLUCKCMS : Pluck CMS 4.6
		RAZORCMS : Razor CMS 1.1
		REDAXSCRIPT : Redaxscript 0.3
		DRUPAL : Drupal Panels 5.x-1.2
		DRUPAL : Drupal Custom Pagers 5.x-1.9

Original document		Justin C. Klein Keane, Drupal Custom Pagers Module XSS (01.02.2011)
		Justin C. Klein Keane, Drupal Panels 5.x-1.2 XSS Vulnerability (01.02.2011)
		advisory_(at)_htbridge.ch, HTB22805: Path disclosure in Redaxscript (01.02.2011)
		advisory_(at)_htbridge.ch, HTB22804: SQL Injection in Redaxscript (01.02.2011)
		advisory_(at)_htbridge.ch, HTB22803: Path disclosure in Razor CMS (01.02.2011)
		advisory_(at)_htbridge.ch, HTB22799: Path disclosure in Pluck CMS (01.02.2011)
		advisory_(at)_htbridge.ch, HTB22798: Path disclosure in Pluck CMS (01.02.2011)
		YGN Ethical Hacker Group, Zikula CMS 1.2.4 <= Cross Site Request Forgery (CSRF) Vulnerability (01.02.2011)

Discuss:

Read or add your comments to this news (0 comments)