Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		18.05.2007
Source:
SecurityVulns ID:		7722
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		RPM2HTML : rpm2html 1.6
		REDOABLE : Redoable 1.2

Original document		hack2prison_(at)_yahoo.com, eSyndiCat Input Validation Error Vulnerability (18.05.2007)
		john_(at)_martinelli.com, RedLevel Advisory #015 - Redoable 1.2 Cross-Site Scripting Vulnerability (patch included) (18.05.2007)
		Vlad Ionescu, rpm2html 1.6 XSS Vulnerability (18.05.2007)

Files:		Exploits eSyndiCat Input Validation Error Vulnerability
		Exploits Redoable 1.2 - Cross-Site Scripting Vulnerability
Discuss:		Read or add your comments to this news (0 comments)

HP Systems Insight Manager for Windows unauthorized access updated since 18.05.2007
Published:		19.05.2007
Source:		BUGTRAQ
SecurityVulns ID:		7723
Type:		remote
Level:		6/10
Description:		Invalid session cookie processing allows administrative session hijacknig.

Affected:		HP : Systems Insight Manager 5.0
		HP : Systems Insight Manager 4.2

Original document		ACROS Security, ACROS Security: Session Fixation Vulnerability in HP SIM 5.0 (19.05.2007)
		HP, [security bulletin] HPSBMA02213 SSRT061214 rev.1 - HP Systems Insight Manager (SIM) for Windows, Remote Privileged Access and Arbitrary Code Execution (18.05.2007)

Discuss:

Read or add your comments to this news (0 comments)