Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) updated since 06.06.2008
Published:		06.06.2008
Source:		BUGTRAQ
SecurityVulns ID:		9060
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		SCHOOLCENTER : SchoolCenter 8.0
		WEBALBUM : WEBAlbum 2.0

Original document		tan_prathan_(at)_hotmail.com, WEBAlbum <= 2.0 Remote Stored Cross Site Scripting Vulnerability (06.06.2008)
		Hackers Center Security Group, SchoolCenter URL Handling Cross Site Scripting Vulnerability (06.06.2008)

Discuss:

Read or add your comments to this news (0 comments)

F5 Firepass crossite scripting
Published:		06.06.2008
Source:		BUGTRAQ
SecurityVulns ID:		9061
Type:		remote
Level:		5/10
Description:		Crossite scripting via crossite scripting protection management page.

Affected:

F5 : FirePass 6.0

Original document

nnposter_(at)_disclosed.not, F5 FirePass Content Inspection Management XSS (06.06.2008)

Discuss:

Read or add your comments to this news (0 comments)

VMWare multiple security vulnerabilities updated since 05.06.2008
Published:		06.06.2008
Source:		BUGTRAQ
SecurityVulns ID:		9055
Type:		local
Level:		5/10
Description:		Multiple privilege escalation in guest OS.

Affected:		VMWARE : VMware Workstation 5.5
		VMWARE : VMware Player 1.0
		VMWARE : VMware Server 1.0
		VMWARE : VMware ACE 1.0
		VMWARE : VMWare Workstation 6.0
		VMWARE : VMware Player 2.0
		VMWARE : VMWare ACE 2.0
		VMWARE : VMware Fusion 1.1
		VMWARE : VMware ESXi 3.5
		VMWARE : VMware ESXi 3.0
		VMWARE : VMware ESXi 2.5
CVE:		CVE-2008-2097 (Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an "invalid Content-Length.")
		CVE-2008-0967
		CVE-2007-5671

Original document		VMWARE, iDefense Security Advisory 06.04.08: VMware Multiple Products vmware-authd Untrusted Library Loading Vulnerability (05.06.2008)
		IDEFENSE, iDefense Security Advisory 06.04.08: VMware Tools HGFS Local Privilege Escalation Vulnerability (05.06.2008)
		VMWARE, VMSA-2008-0009 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion, VMware Server, VMware VIX API, VMware ESX, VMware ESXi resolve critical security issues (05.06.2008)

Discuss:

Read or add your comments to this news (0 comments)