Информационная безопасность
[RU] switch to English


Ежедневная сводка ошибок в Web-приложениях (PHP, ASP, JSP, CGI, Perl)
Опубликовано:14 сентября 2006 г.
Источник:
SecurityVulns ID:6615
Тип:удаленная
Уровень опасности:
5/10
Описание:Инъекции PHP, инъекции SQL, обратный путь в каталогах, межсайтовый скриптинг, утечка информации и т.д.
Затронутые продукты:SNITZ : Snitz Forums 3.4
 ZOPE : zope 2.7
 SOFTCOMPLEX : PHP Event Calendar 1.5
 DOIKA : Doika guestbook 2.5
 CITYFORFREE : indexcity 1.0
 NEWSSCRIPT : Newsscript 0.5
 TUALBLOG : TualBLOG 1.0
 NX5 : NX5Linkx 1.0
 CLOUDNINEINTERAC : Tag Board 3.0
 CLOUDNINEINTERAC : Links Manager
 FORUMJBC : ForumJBC 4
 VENTURENINE : Tagger LE
 DCPPORTAL : DCP-Portal SE 6.0
 KNOWLEDGEBUILDER : knowledgeBuilder 2.2
 MAGICNEWSPRO : Magic News Pro 1.0
 MAMBO : com_serverstat Mambo component 0.4
 PHPQUIZ : phpQuiz 0.01
 EMUCMS : emuCMS 0.3
Оригинальный текстdocumentSECUNIA, [SA21883] emuCMS "query" and "page" Cross-Site Scripting Vulnerabilities (14.09.2006)
 documentchris_hasibuan_(at)_yahoo.com, phpQuiz v0.01 design and coding byJule Slootbeek (pagename) Remote File Inclusion (14.09.2006)
 documentMILW0RM, Mambo com_serverstat Component <=0.4.4 Remote File Include Vulnerability (14.09.2006)
 documentSaudi Hackrz, Magic News Pro => 1.0.3 (script_path) Remote File Inclusion Exploit (14.09.2006)
 documenthamidreza_(at)_mineduc.gov.rw, KnowledgeBuilder.v2.2.PHP.NULL-WDYL Remote File Inclusion (14.09.2006)
 documentdaftrix_(at)_gmail.com, Newsscript <= 0.5 Remote and Local File Include Vulnerability (14.09.2006)
 documentHACKERS PAL, DCP-Portal SE 6.0 multiple injections (14.09.2006)
 documentHACKERS PAL, ADOdb Date Library Full path Bugs (14.09.2006)
 documentSECUNIA, [Full-disclosure] Secunia Research: Tagger LE PHP "eval()" Injection Vulnerabilities (14.09.2006)
 documentx17_(at)_hotmail.fr, # ForumJBC v4 < = Cross-Site Scripting - XSS Exploit ; (14.09.2006)
 documentOS2A BTO, PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability (14.09.2006)
 documentajannhwt_(at)_hotmail.com, Snitz Forums 2000 v3.4.06 (14.09.2006)
 documentAliaksandr Hartsuyeu, [eVuln] Doika guestbook 'page' XSS Vulnerability (14.09.2006)
 documentAliaksandr Hartsuyeu, [eVuln] indexcity SQL Injection and XSS Vulnerabilities (14.09.2006)
 documentAliaksandr Hartsuyeu, [eVuln] Links Manager Multiple XSS and SQL Injection Vulnerabilities (14.09.2006)
 documentAliaksandr Hartsuyeu, [eVuln] CJ Tag Board XSS Vulnerability (14.09.2006)
 documentAliaksandr Hartsuyeu, [eVuln] NX5Linkx Multiple Vulnerabilities (14.09.2006)
 documentDj_ReMix_20_(at)_hotmail.com, TualBLOG v 1.0 multiple sql injection (14.09.2006)
 documentMoritz Muehlenhoff, [SECURITY] [DSA 1176-1] New zope2.7 packages fix information disclosure (14.09.2006)

О сайте | Условия использования
© SecurityVulns, 3APA3A, Владимир Дубровин
Нижний Новгород