Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		08.10.2006
Source:
SecurityVulns ID:		6691
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHPLIVE : PHP Live! 3.1
		PHPBB : phpBB Random User Registration Number 1.0 Mod
		PHPBB : phpBB Security Suite Mod 1.0
		PHPBB : Dimension of phpBB 0.2 module

Original document		MILW0RM, Dimension of phpBB <= 0.2.5 (phpbb_root_path) Remote File Includes (08.10.2006)
		MILW0RM, phpBB Security Suite Mod 1.0.0 (logger_engine.php) Remote File Include (08.10.2006)
		MILW0RM, phpBB Security Suite Mod 1.0.0 (logger_engine.php) Remote File Include (08.10.2006)
		MILW0RM, phpBB Random User Registration Number 1.0 Mod Inclusion Vulnerability (08.10.2006)
		paisterist.nst_(at)_gmail.com, PHP Live! <= 3.1 help.php Remote File Inclusion vulnerability (08.10.2006)

Discuss:

Read or add your comments to this news (0 comments)

shttpd web server buffer overflow
Published:		08.10.2006
Source:		MILW0RM
SecurityVulns ID:		6693
Type:		remote
Level:		5/10
Description:		Buffer overflow on oversized POST request URL.

Affected:

SHTTPD : SHTTPD 1.34

Files:		Exploits SHTTPD Buffer Overflow (POST)
Discuss:		Read or add your comments to this news (0 comments)

KMail DoS updated since 08.10.2006
Published:		15.10.2006
Source:		BUGTRAQ
SecurityVulns ID:		6692
Type:		client
Level:		5/10
Description:		Crash on HTML parsing.

Affected:

KDE : KMail 1.9

Original document		N.N.P, [Full-disclosure] Kmail <= 1.9.1 (table/frameset) DOS (15.10.2006)
		N.N.P, [Full-disclosure] Kmail <= 1.9.1 (latest) DOS (08.10.2006)

Files:		Message exploits KMail crash
Discuss:		Read or add your comments to this news (0 comments)