Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		31.01.2008
Source:
SecurityVulns ID:		8623
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:

COPPERMINE : Coppermine 1.4

Original document		Sw33t.h4cK3r_(at)_hotmail.com, contactforms "cforms-css.php" Remote File Inclusion (31.01.2008)
		Janek Vind, [waraxe-2008-SA#066] - Multiple Vulnerabilities in Coppermine 1.4.14 (31.01.2008)

Discuss:

Read or add your comments to this news (0 comments)

xdg-utils shell characters vulnerability
Published:		31.01.2008
Source:		BUGTRAQ
SecurityVulns ID:		8624
Type:		library
Level:		5/10
Description:		Shell characteres vulnerability on invoking external application by URI.

Affected:		xdg-utils 1.0 : xdg-utils 1.0
CVE:		CVE-2008-0386

Original document

GENTOO, [ GLSA 200801-21 ] Xdg-Utils: Arbitrary command execution (31.01.2008)

Discuss:

Read or add your comments to this news (0 comments)

OpenBSD BGP daemon crossite scripting
Published:		31.01.2008
Source:		BUGTRAQ
SecurityVulns ID:		8625
Type:		remote
Level:		5/10
Description:		Web-interface crossite scripting.

Affected:

OPENBSD : OpenBSD 4.1

Original document

Digital Security Research Group [DSecRG], [DSECRG-08-007] OpenBSD BGPD daemon Web Interface XSS. (31.01.2008)

Discuss:

Read or add your comments to this news (0 comments)