Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		31.03.2006
Source:
SecurityVulns ID:		5966
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.

Affected:		HITACHI : Groupmax World Wide Web 2
		HITACHI : Groupmax World Wide Web 3
		MANTIS : Mantis 1.0
		KEYSTONE : Keystone Digital Library Suite 1.5
		PHPFOX : phpFoX 1.06
		SEARCHINDEXER : SiteSearch Indexer 3.5
		MONALBUM : Mon Album 0.8
		HITACHI : Groupmax World Wide Web Desktop 5
		HITACHI : Groupmax World Wide Web Desktop 6
		HITACHI : Groupmax World Wide Web Desktop for Jichitai
		HITACHI : Groupmax World Wide Web for Scheduler 2
		HITACHI : Groupmax World Wide Web for Scheduler 3
		VCREATOR : v-creator 1.3
		ESQLANELAPSE : Esqlanelapse 2.0
		ESQLANELAPSE : Esqlanelapse 2.2

Original document		SECUNIA, [SA19453] v-creator VCEngine.php Shell Command Injection Vulnerability (31.03.2006)
		SECUNIA, [SA19483] Groupmax World Wide Web Cross-Site Scripting Vulnerability (31.03.2006)
		undefined1_(at)_gmail.com, MonAlbum 0.8.7 SQL Injection (31.03.2006)
		dabdoub-mosikar_(at)_moroccan-security.com, Oxygen<=1.x.x SQL injection (31.03.2006)
		simo64_(at)_gmail.com, MediaSlash Gallery 'rub' variable Remote File inlcusion Vulnerability (31.03.2006)
		Cyber Lords, XSS in phpFoX Version 1.06 (31.03.2006)
		r0t, SiteSearch Indexer 3.5 XSS vuln. (31.03.2006)
		r0t, Keystone DLS SQL vuln. (31.03.2006)
		r0t, Mantis XSS vuln. (31.03.2006)

Discuss:

Read or add your comments to this news (0 comments)

Multiple HP-UX vulnerabilities
Published:		31.03.2006
Source:		BUGTRAQ
SecurityVulns ID:		5967
Type:		local
Level:		5/10
Description:		It's possible to change file permissions recursively with 'usermod'. DoS with 'passwd'.

Affected:		HP : HP-UX 11.00
		HP : HP-UX 11.11
		HP : HP-UX 11.23

Original document		HP, [security bulletin] HPSBUX02102 SSRT051078 rev.2 - HP-UX usermod(1M) Local Unauthorized Access. (31.03.2006)
		HP, [security bulletin] HPSBUX02103 SSRT5953 rev.2 - HP-UX passwd(1) Local Denial of Service (DoS) (31.03.2006)

Discuss:

Read or add your comments to this news (0 comments)