Alerts from SecurityFocus Newsletter #316

Summarized by Daniel Convissor

PHP

• PHP Session Handling Local Session Hijacking Vulnerability
  This report is very vague and seems bogus to me.

APPLICATIONS USING PHP

• PunBB Multiple SQL Injection Vulnerabilities
• PunBB BBCode URL Tag HTML Injection Vulnerability
• PHPTagCool HTTP Header SQL Injection Vulnerability
• PHPNuke Multiple SQL Injection Vulnerabilities
• PHP-Nuke WYSIWYG Editor Unspecified Security Vulnerability
• Land Down Under Multiple SQL Injection Vulnerabilities
• Mail-it Now! Upload2Server Arbitrary File Upload Vulnerability
• ATutor Password_Reminder.PHP SQL Injection Vulnerability
• ATutor Chat Logs Remote Information Disclosure Vulnerability
• Noah's Classifieds Index.PHP SQL Injection Vulnerability
• Noah's Classifieds Index.PHP Cross-Site Scripting Vulnerability
• Digital Scribe Login SQL Injection Vulnerability
• AEwebworks aeDating Search_Result.PHP SQL Injection Vulnerability
• DeluxeBB Multiple SQL Injection Vulnerabilities
• CutePHP CuteNews Flood Protection Client-IP PHP Code Injection Vulnerability