Alerts from SecurityFocus Newsletter #311

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• PHP-Fusion Messages.PHP SQL Injection Vulnerability
• SysCP Multiple Script Execution Vulnerabilities
• Invision Power Board Attached File Cross-Site Scripting Vulnerability
• PHPSiteStats Unspecified Authentication Bypass Vulnerability
• OpenBB Multiple SQL Injection Vulnerabilities
• E107 Website System Attached File Cross-Site Scripting Vulnerability
• Gravity Board X Login SQL Injection Vulnerability
• Gravity Board X DeleteThread.PHP Cross-Site Scripting Vulnerability
• Gravity Board X CSS Template Unauthorized Access Vulnerability
• MyFAQ Multiple SQL Injection Vulnerabilities
• Calendar Express Multiple SQL Injection Vulnerabilities
• Calendar Express Search.PHP Cross-Site Scripting Vulnerability
• Chipmunk CMS Fontcolor Cross Site Scripting Vulnerability
• FunkBoard Multiple Cross-Site Scripting Vulnerabilities
• E107 Submitted Link HTML Injection Vulnerability
• TriggerTG TClanPortal Multiple SQL Injection Vulnerabilities
• XMB Forum U2U.Inc.PHP SQL Injection Vulnerability
• WordPress Cookie Data PHP Code Injection Vulnerability
• EZUpload Multiple Remote File Include Vulnerabilities
• PHPTB Topic Board Multiple SQL Injection Vulnerabilities
• PHlyMail Unspecified Authentication Bypass Vulnerability
• VegaDNS Index.PHP Cross Site Scripting Vulnerability
• EQDKP Session.PHP Authorization Bypass Vulnerability
• Gallery PostNuke Integration Access Validation Vulnerability
• MyBulletinBoard Multiple SQL Injection Vulnerabilities
• PHPBB BBCode IMG Tag Script Injection Vulnerability
• FUDForum Tree View Access Validation Vulnerability

RELATED STUFF

• MySQL User-Defined Function Buffer Overflow Vulnerability