Ежедневная сводка ошибок в Web-приложениях (PHP, ASP, JSP, CGI, Perl)
Опубликовано:		13 октября 2006 г.
Источник:
SecurityVulns ID:		6712
Тип:		удаленная
Опасность:		5/10
Описание:		Инъекции PHP, инъекции SQL, обратный путь в каталогах, межсайтовый скриптинг, утечка информации и т.д.

Затронутые продукты:		PHPBB : phpBB 2.0
		XEOPORT : Xeobook 0.93
		XEOPORT : XeoPort 0.81
		MAMBO : ExtCalThai_Component 0.9
		MALUINFO : maluinfo 206.2
		PHPBB : phpBB PlusXL 2.0
		GENEPI : Genepi 1.6
		CDSAGENDA : Cdsagenda 4.2
		PHPMYCONFERENCES : phpMyConferences 8.0
		OCS : Open Conference Systems 1.1
		PHPBB : PHPBB insert user 0.1
		REDACTIONSYSTEM : Redaction System 1.0
		PHPBB : phpBB SpamBlocker Mod 1.0
		PHPBB : phpBB Import Tools Mod 0.1
		PHPBB : phpBB Ajax Shoutbox 0.0
		AFGB : afgb GUESTBOOK 2.2
		MINIBB : miniBB keyword_replacer 1.0

Оригинальный текст		CvIr.System_(at)_gmail.com, CMS contenido Remote File Inclusion (13.10.2006)
		Kw3rLn, miniBB keyword_replacer <= 1.0 [pathToFiles] Remote File Include Vulnerability (13.10.2006)
		MILW0RM, AFGB GUESTBOOK 2.2 (Htmls) Remote File Include Vulnerabilities (13.10.2006)
		MILW0RM, phpBB Ajax Shoutbox <= 0.0.5 Remote File Include Vulnerability (13.10.2006)
		MILW0RM, phpBB Import Tools Mod <= 0.1.4 Remote File Include Vulnerability (13.10.2006)
		MILW0RM, phpht Topsites (common.php) Remote File Include Vulnerability (13.10.2006)
		k1tk4t_(at)_newhack.org, Open Conference Systems <= 1.1.3 Remote File Inclusion (13.10.2006)
		k1tk4t_(at)_newhack.org, phpMyConferences <= 8.0.2 Remote File Inclusion (13.10.2006)
		MILW0RM, Cdsagenda <= 4.2.9 (SendAlertEmail.php) File Include Vulnerability (13.10.2006)
		Kw3rLn, Genepi <= 1.6 [topdir] Remote File Include Vulnerability (13.10.2006)
		k1tk4t_(at)_newhack.org, ExtCalThai_Component <= 0.9.1 Remote File Inclusion (13.10.2006)
		ReeM_HaCk_(at)_HoTmAiL.cOm, Security Suite IP Logger Remote File Inclusion (13.10.2006)
		ReeM_HaCk_(at)_HoTmAiL.cOm, Security Suite IP Logger Remote File Inclusion (13.10.2006)
		hack2prison_(at)_yahoo.com, Iono all version fullpath disclosure (13.10.2006)
		tamriel_(at)_gmx.net, Xeobook <= 0.93 Multiple SQL Injection Vulnerabilities (13.10.2006)
		tamriel_(at)_gmx.net, XeoPort <= 0.81 SQL Injection Vulnerability (13.10.2006)

Файлы:		maluinfo version 206.2.38l Remote File Include Vulnerability
		PHPBB insert user 0.1
		Redaction System 1.0000 - Remote Include Exploit
		Exploits phpBB PlusXL 2.x <= biuld 272 Remote File Include Vulnerability
		pamBlockerMODv <= 1.0.2 Remote File Include Vulnerability
Обсудить:		Прочитать или оставить комментарии к новости (0 комментариев)