Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		25.06.2007
Source:
SecurityVulns ID:		7847
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:

PAPOO : Papoo 3.6

Original document		Nico Leidecker, [Full-disclosure] Papoo CMS 3.6 - Access Restriction Bypass (25.06.2007)
		Nico Leidecker, [Full-disclosure] Papoo CMS 3.6 - SQL Injection (25.06.2007)

Discuss:

Read or add your comments to this news (0 comments)

Apple Safari XMLHttpRequest object header injection
Published:		25.06.2007
Source:		FULL-DISCLOSURE
SecurityVulns ID:		7848
Type:		client
Level:		3/10
Description:		It's possible to inject additional headers into XMLHttpRequest object's request.

Affected:

APPLE : Safari 3.0

Original document

Richard Moore, [Full-disclosure] Safari XMLHttpRequest HTTP header injection (25.06.2007)

Discuss:

Read or add your comments to this news (0 comments)