Computer Security
[EN] securityvulns.ru no-pyccku


Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:31.01.2008
Source:
SecurityVulns ID:8623
Type:remote
Threat Level:
5/10
Description:PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.
Affected:COPPERMINE : Coppermine 1.4
Original documentdocumentSw33t.h4cK3r_(at)_hotmail.com, contactforms "cforms-css.php" Remote File Inclusion (31.01.2008)
 documentJanek Vind, [waraxe-2008-SA#066] - Multiple Vulnerabilities in Coppermine 1.4.14 (31.01.2008)

xdg-utils shell characters vulnerability
Published:31.01.2008
Source:
SecurityVulns ID:8624
Type:library
Threat Level:
5/10
Description:Shell characteres vulnerability on invoking external application by URI.
Affected:xdg-utils 1.0 : xdg-utils 1.0
CVE:CVE-2008-0386
Original documentdocumentGENTOO, [ GLSA 200801-21 ] Xdg-Utils: Arbitrary command execution (31.01.2008)

OpenBSD BGP daemon crossite scripting
Published:31.01.2008
Source:
SecurityVulns ID:8625
Type:remote
Threat Level:
5/10
Description:Web-interface crossite scripting.
Affected:OPENBSD : OpenBSD 4.1
Original documentdocumentDigital Security Research Group [DSecRG], [DSECRG-08-007] OpenBSD BGPD daemon Web Interface XSS. (31.01.2008)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod