Alerts from SecurityFocus Newsletter #305

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• Edgewall Software Trac Unauthorized File Upload/Download Vulnerability
• Uapplication Ublog Reload Multiple SQL Injection Vulnerabilities
• PAFaq Database Unauthorized Access Vulnerability
• PAFaq Question Cross-Site Scripting Vulnerability
• PAFaq Administrator Username SQL Injection Vulnerability
• MercuryBoard Index.PHP Remote SQL Injection Vulnerability
• RaXnet Cacti Multiple SQL Injection Vulnerabilities
• RaXnet Cacti Config_Settings.PHP Remote File Include Vulnerability
• RaXnet Cacti Top_Graph_Header.PHP Remote File Include Vulnerability
• RaXnet Cacti Graph_Image.PHP Remote Command Execution Vulnerability
• Simple Machines Msg Parameter SQL Injection Vulnerability
• Whois.Cart Profile.PHP Cross-Site Scripting Vulnerability
• Whois.Cart Index.PHP Directory Traversal Vulnerability
• UBBCentral UBB.Threads Multiple Cross-Site Scripting Vulnerabilities
• UBBCentral UBB.Threads Multiple SQL Injection Vulnerabilities
• UBBCentral UBB.Threads Multiple HTTP Response Splitting Vulnerabilities
• UBBCentral UBB.Threads Local File Include Vulnerability
• PHP-Nuke Avatar HTML Injection Vulnerability