Alerts from SecurityFocus Newsletter #309

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• Beehive Forum Webtag Multiple SQL Injection Vulnerabilities
• Beehive Forum Webtag Multiple Cross-Site Scripting Vulnerabilities
• Atomic Photo Album Apa_PHPInclude.INC.PHP Remote File Include Vulnerability
• PHPFirstpost Block.PHP Remote File Include Vulnerability
• VBZoom Forum Show.PHP SQL Injection Vulnerability
• VBZooM Forum Multiple Cross-Site Scripting Vulnerabilities
• NETonE PHPBook Guestbook.PHP Cross Site Scripting Vulnerability
• Advanced Guestbook User-Agent HTML Injection Vulnerability
• PNG Counter Demo.PHP Cross-Site Scripting Vulnerability
• Clever Copy Multiple Cross-Site Scripting Vulnerabilities
• Clever Copy Private Message Unauthorized Access Vulnerability
• Blue Magic Forum Multiple Cross Site Scripting Vulnerabilities
• PHPList Admin Page SQL Injection Vulnerability
• Website Baker Browse.PHP Cross-Site Scripting Vulnerability
• Website Baker Arbitrary File Upload Vulnerability
• Gforge Multiple Cross Site Scripting Vulnerabilities
• Simplicity oF Upload Download.PHP Remote File Include Vulnerability
• Kayako LiveResponse Multiple Input Validation Vulnerabilities
• PluggedOut CMS Multiple Input Validation Vulnerabilities
• PC-Experience/Toppe Unauthorized User Access Vulnerability
• PC-Experience/Toppe PM.PHP MSG Parameter Cross-Site Scripting Vulnerability
• Ragnarok Online Control Panel Authentication Bypass Vulnerability