Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		17.09.2007
Source:
SecurityVulns ID:		8156
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		PHPSTATS : php-stats 0.1
		NUCLEUS : Nucleus 3.01
		STRIDE : Stride 1.0

Original document		s0cratex_(at)_hotmail.com, Gelato SQL Injection exploit (17.09.2007)
		root_(at)_hanicker.it, new XSS vulnerability in php-stats -tracking.php (17.09.2007)
		durito, множественные уязвимости в Stride v1.0 (17.09.2007)
		MustLive, Vulnerability in Nucleus (17.09.2007)

Files:		Gelato SQL Injection exploit
Discuss:		Read or add your comments to this news (0 comments)

Boa webserver Intersil extension (multiple wireless access points) buffer overflow
Published:		17.09.2007
Source:		BUGTRAQ
SecurityVulns ID:		8157
Type:		remote
Level:		6/10
Description:		Buffer overflow in HTTP Basic authentication allows to access device without password.

Affected:		BOA : Boa 0.93
		FREELAN : FreeLAN RO80211G-AP

Original document

luca.carettoni_(at)_securenetwork.it, Boa (with Intersil Extensions) - HTTP Basic Authentication Bypass (17.09.2007)

Discuss:

Read or add your comments to this news (0 comments)

HP System Management Homepage for Windows incomplete update
Published:		17.09.2007
Source:		BUGTRAQ
SecurityVulns ID:		8158
Type:		remote
Level:		4/10
Description:		Some system updates may not be installed if HP Version Control Agent (VCA) or Version Control Repository Manager (VCRM) present on the same host.

Original document

HP, [security bulletin] HPSBMA02258 SSRT071470 rev.1 - HP System Management Homepage (SMH) for Windows, Incomplete Update Installation (17.09.2007)

Discuss:

Read or add your comments to this news (0 comments)

AXIS 207W web camera multiple security vulnerabilities
Published:		17.09.2007
Source:		BUGTRAQ
SecurityVulns ID:		8161
Type:		remote
Level:		5/10
Description:		Crossite scripting, request forgery.

Affected:

AXIS : Axis 207W

Original document

Seth Fogie, Axis 207W Wireless Camera Web Interface - Multiple Vulnerabilities (17.09.2007)

Discuss:

Read or add your comments to this news (0 comments)

Microsoft Foundation Classes FindFile buffer overflow
Published:		17.09.2007
Source:		BUGTRAQ
SecurityVulns ID:		8160
Type:		library
Level:		5/10
Description:		Buffer overflow on oversized thirst argument.

Affected:		MICROSOFT : MFC 4.2
		MICROSOFT : MFC 7.1
		HP : HP Photo & Imaging Gallery version 1.1

Original document		GOODFELLAS SRT, [GOODFELLAS-VULN] ActiveX hpqutil!ListFiles hpqutil.dll - Remote heap overflow (17.09.2007)
		GOODFELLAS SRT, [GOODFELLAS-VULN] FileFind class from MFC Library cause heap overflow (17.09.2007)

Discuss:

Read or add your comments to this news (0 comments)