Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		18.11.2007
Source:
SecurityVulns ID:		8355
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. Cryptographp: CAPTCHA protection bypass.

Affected:

JBS : JBS 2.0

Original document		admin_(at)_biyofrm.com, Sciurus Hosting Panel Code İnjection (18.11.2007)
		verys-secret_(at)_hotmail.com, Myspace Clone Script (index.php) Remote File Inclusion Vulnerability (18.11.2007)
		verys-secret_(at)_hotmail.com, Black Lily 2007 (products.php class) Remote SQL Injection Vulnerability (18.11.2007)
		verys-secret_(at)_hotmail.com, net-finity (links.php) Remote SQL Injection Vulnerability (18.11.2007)
		no-reply_(at)_aria-security.net, JiRos Upload Manager SQL Injection (18.11.2007)
		MustLive, Vulnerability in Cryptographp (18.11.2007)
		okan alp, ESA Software S.p.a. Asp/Portal www/archivio.asp Sql injection (18.11.2007)

Discuss:

Read or add your comments to this news (0 comments)