Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		13.07.2006
Source:
SecurityVulns ID:		6373
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		TOPO : TOPo 2.2
		SQUERY : SQuery 4.5
		CMSMUNDO : CMS Mundo 1.0
		LAZARUS : Lazarus Guestbook 1.6
		FLV : FLV Players 8

Original document		SECUNIA, [SA20589] CMS Mundo SQL Injection Vulnerabilities (13.07.2006)
		xzerox_(at)_linuxmail.org, FLV Players Multiple Input Validation Vulnerabilities (13.07.2006)
		darkz.gsa_(at)_gmail.com, Lazarus Guestbook Cross Site Scripting Vulnerabilities (13.07.2006)
		darkz.gsa_(at)_gmail.com, TOPo v.2.2.178 Account Reset (13.07.2006)
		SHiKaA-_(at)_hotmail.com, SQuery <= 4.5(libpath) Remote File Inclusion Exploit (13.07.2006)

Discuss:

Read or add your comments to this news (0 comments)

Juniper JunOS IPv6 DoS
Published:		13.07.2006
Source:		BUGTRAQ
SecurityVulns ID:		6375
Type:		remote
Level:		5/10
Description:		Memory leak on specific IPv6 packet processing.

Affected:

JUNIPER : JunOS 8.0

Original document

SECUNIA, [SA21003] Juniper Networks JUNOS IPv6 Packet Handling Denial of Service (13.07.2006)

Discuss:

Read or add your comments to this news (0 comments)

BT Voyager wireless information leak
Published:		13.07.2006
Source:		BUGTRAQ
SecurityVulns ID:		6374
Type:		remote
Level:		5/10
Description:		It's possible to access few configuration files without authentication.

Affected:

BT : BT Voyager 2091

Original document

SECUNIA, [SA20982] BT Voyager 2091 Wireless Exposure of Configuration Information (13.07.2006)

Discuss:

Read or add your comments to this news (0 comments)

libtunepimp library buffer overflow
Published:		13.07.2006
Source:		BUGTRAQ
SecurityVulns ID:		6377
Type:		library
Level:		5/10
Description:		LookupTRM::lookup() oversized album release date buffer overflow.

Affected:

LIBTUNEPIMP : libtunepimp 0.4

Original document

SECUNIA, [SA21026] libtunepimp Release Date Lookup Buffer Overflow (13.07.2006)

Discuss:

Read or add your comments to this news (0 comments)