Alerts from SecurityFocus Newsletter #308

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• Invision PowerBoard SQL Injection Privilege Escalation Vulnerability
• OSCommerce Update.PHP Information Disclosure Vulnerability
• CaLogic Multiple Remote File Include Vulnerabilities
• e107 Website System Nested BBCode URL Tag Script Injection Vulnerability
• tForum Member.PHP Cross-Site Scripting Vulnerability
• PHPPageProtect Admin.PHP Cross Site Scripting Vulnerability
• PHPPageProtect Login.PHP Cross Site Scripting Vulnerability
• SEO-Board Smilies_popup.PHP Cross Site Scripting Vulnerability
• PHPFinance Inc.login.PHP Authentication Bypass Vulnerability
• Form Sender Processform.PHP3 Name Cross Site Scripting Vulnerability
• Form Sender Processform.PHP3 Failed Cross Site Scripting Vulnerability
• CuteNews Search.PHP Cross-Site Scripting Vulnerability
• PHP Surveyor Multiple Cross-Site Scripting Vulnerabilities
• PHP Surveyor Multiple SQL Injection Vulnerabilities
• PHP-Fusion BBcode Color Tag Code Injection Vulnerability
• PHPNews Auth.PHP SQL Injection Vulnerability
• ReviewPost Showproduct.PHP Sort SQL Injection Vulnerability
• Website Generator Remote Code Execution Vulnerability
• Website Generator Multiple Remote Cross Site Scripting Vulnerabilities
• Pyrox Search Newsearch.PHP Whatdoreplace Cross-Site Scripting Vulnerability
• PHPSiteSearch Search.PHP Query Cross-Site Scripting Vulnerability
• CMSimple Index.PHP Search Cross-Site Scripting Vulnerability
• Ultimate PHP Board Multiple Cross-Site Scripting Vulnerabilities
• Ultimate PHP Remote Injection Vulnerabilities
• Sendcard Sendcard.PHP SQL Injection Vulnerability
• Contrexx Multiple Input Validation Vulnerabilities
• PHP TopSites Setup.PHP Authentication Bypass Vulnerability
• ASN Guestbook Multiple Cross-Site Scripting Vulnerabilities

RELATED STUFF

• Mozilla Firefox Weak Authentication Mechanism Vulnerability