Alerts from SecurityFocus Newsletter #313

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• Woltlab Burning Board ModCP.PHP SQL Injection Vulnerability
• Land Down Under Multiple SQL Injection Vulnerabilities
• Land Down Under Multiple Cross-Site Scripting Vulnerabilities
• Coppermine Displayimage.PHP Script Injection Vulnerability
• NEPHP Browse.PHP Cross Site Scripting Vulnerability
• PHPKit Multiple SQL Injection Vulnerabilities
• RunCMS NewBB_Plus and Messages Modules Multiple SQL Injection Vulnerabilities
• RunCMS Arbitrary Variable Overwrite Vulnerability
• PostNuke Multiple Cross Site Scripting Vulnerabilities
• PostNuke DL-viewdownload.PHP SQL Injection Vulnerability
• SaveWebPortal Unauthorized Access Vulnerability
• SaveWebPortal Multiple Remote File Include Vulnerabilities
• SaveWebPortal Multiple Cross Site Scripting Vulnerabilities
• SaveWebPortal Multiple Directory Traversal Vulnerabilities
• WebCalendar Send_Reminders.PHP Remote File Include Vulnerability
• PAFileDB Auth.PHP SQL Injection Vulnerability
• Foojan PHPWeblog Html Injection Vulnerability
• Simple PHP Blog Remote Arbitrary File Upload Vulnerability
• Gallery Script Injection Vulnerability
• PHPgraphy Script Injection Vulnerability
• YaPig Script Injection Vulnerability
• PhotoPost Script Injection Vulnerability