Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		16.08.2006
Source:		BUGTRAQ
SecurityVulns ID:		6497
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		HORDE : Horde 3.0
		FUSIONNEWS : Fusion News 3.7
		LIZGE : Lizge 20
		KOOBIPRO : Koobi Pro 5.6
		OTOPHOLDER : otopholder 1.8
		HORDE : IMP 4.1

Original document		Marc Ruef, [Full-disclosure] [scip_Advisory 2456] Horde Framework and Horde IMP /index.php cross site referencing (16.08.2006)
		Marc Ruef, [Full-disclosure] [scip_Advisory 2457] Horde Framework and Horde IMP /horde/imp/search.php cross site scripting (16.08.2006)
		MosT3mR_(at)_hotmail.com, local file include in PHP-Nuke (autohtml.php) (16.08.2006)
		vampire_chiristof_(at)_yahoo.com, otopholder 1.8 suffers from a local file inclusion,XSS and directory listing vuln (16.08.2006)
		vampire_chiristof_(at)_yahoo.com, Koobi Pro CMS 5.6 SQL injection & XSS (16.08.2006)
		crackers_child_(at)_sibersavascilar.com, Lizge V.20 Web Portal File Include Vulnerability (16.08.2006)
		crackers_child_(at)_sibersavascilar.com, Mambo com_lm component (archive.php) Remote File Include Vulnerabilities (16.08.2006)

Files:		Exploits Fusion News v3.7 Remote File Inclusion
Discuss:		Read or add your comments to this news (0 comments)