 |
|
|
|
| Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | | Published: |  | 19.10.2006 | | Source: |  | | | SecurityVulns ID: |  | 6726 | | Type: |  | remote | | Level: |  | 5/10 | | Description: |  | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. |
| Affected: |  | PHPBB : phpBB 2.0 | | | | PHPADSNEW : phpAdsNew 2.0 | | | | ZORUM : zorum 3.5 | | | | PHPLIST : phplist 2.10 | | | | SIMPLOG : simplog 0.9 | | | | TORRENTXLUX : TorrentFlux 2.1 | | | | LODEL : patchlodel 0.7 | | | | PHPFORGE : PHP Forge 3b2 | | | | OSPREY : osprey 1.0 | | | | COMDEV : Comdev One Admin 4.1 | | | | BOONEX : Boonex Dolphin 5.2 | | | | PPOPN : P-Book | | | | CSFORUM : CS-Forum 0.82 | | | | PHPRECIPEBOOK : PHPRecipeBook 2.35 | | | | WEVWEB : DEV Web Manager System 1.5 | | | | JOOMLA : Joomla BSQ Sitestats 1.8 | | | | JOOMLA : Joomla BSQ Sitestats 2.0 |
| Original document |  | CorryL, {x0n3-h4ck} DEV Web Manager System <= 1.5 XSS Exploit (19.10.2006) |
| | | CarcaBotx_(at)_yahoo.com, PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit (19.10.2006) |
| | | mahmood ali, PhpBB<=2.0.10 (groupcp.php) Remote File Include Vulnerability (19.10.2006) |
| | | mahmood ali, CS-Forum 0.82 (ajouter.php) Remote File Include Vulnerability (19.10.2006) |
| | | erdc_(at)_echo.or.id, [ECHO_ADV_46$2006] P-Book <= 1.17 (pb_lang) Remote File Inclusion (19.10.2006) |
| | | xp1o_(at)_msn.com, zorum_3_5 <=(dbproperty.php) Remote File Inclusion Exploit (19.10.2006) |
| | | disfigure, Simplog 0.9.3.1 SQL Injection (19.10.2006) |
| | | disfigure, Boonex Dolphin 5.2 Remote File Inclusion (19.10.2006) |
| | | disfigure, Comdev One Admin 4.1 Remote File Inclusion (19.10.2006) |
| | | wacky_(at)_ihack.pl, phpAdsNew include bug! (19.10.2006) |
| | | erdc_(at)_echo.or.id, [ECHO_ADV_55$2006]Phpmybibli <=2.1 Multiple Remote File Inclusion Vulnerability (19.10.2006) |
| | | 3cab7cc7_(at)_srasg.stevenroddis.com.au, TorrentFlux ?user_id? Script Insertion (19.10.2006) |
| | | 3cab7cc7_(at)_srasg.stevenroddis.com.au, TorrentFlux ?file? Script Insertion (19.10.2006) |
| | | 3cab7cc7_(at)_srasg.stevenroddis.com.au, TorrentFlux ?action? Script Insertion (19.10.2006) |
| | | the-free_kernel_(at)_b0rizq.net, [Xss] IN phplist v 2.10.2 (19.10.2006) |
| | | KaBaRa.HaCk.eGy_(at)_Gmail.com, osprey 1.0 (ListRecords.php) Remote File Include Vulnerability (19.10.2006) |
| | | mahmood ali, PHP Forge 3b2 (/inc/inc.php) Remote File Include Vulnerability (19.10.2006) |
| | | mahmood ali, PHP Forge 3b2 (/inc/inc.php) Remote File Include Vulnerability (19.10.2006) |
| | | erne_(at)_ernealizm.com, patchlodel-0.7.3 - Remote File Include Vulnerabilities (19.10.2006) |
| | | xx_hack_xx_2004_(at)_hotmail.com, Full Path Disclosure in PHP-Wyana (2) (19.10.2006) |
| F5 Firepass crossite scripting | | Published: | | 19.10.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 6729 | | Type: | | remote | | Level: | | 5/10 | | Description: | | my.acctab.php3 sid parameter crossite scripting. |
| |
|
| |
