Alerts from SecurityFocus Newsletter #317

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• CutePHP CuteNews Flood Protection Client-IP PHP Code Injection Vulnerability
• EPay Pro Index.PHP Directory Traversal Vulnerability
• VBulletin Multiple Moderator And Administrator SQL Injection Vulnerabilities
• VBulletin Multiple Cross-Site Scripting Vulnerabilities
• NooToplist Index.PHP Multiple SQL Injection Vulnerabilities
• MX Shop Index.PHP Multiple SQL Injection Vulnerabilities
• Hesk Session ID Authentication Bypass Vulnerability
• PHP Advanced Transfer Manager Multiple Directory Traversal Vulnerabilities
• PHP Advanced Transfer Manager Multiple Cross-Site Scripting Vulnerabilities
• Land Down Under Multiple Remote SQL Injection Vulnerabilities
• Simplog Multiple SQL Injection Vulnerabilities
• PunBB Forgotten Email Cross-Site Scripting Vulnerability
• PunBB Language Selection File Include Vulnerability
• GeSHI Example.PHP Directory Traversal Vulnerability
• My Little Forum Search.PHP SQL Injection Vulnerability
• PHPMyFAQ Password.PHP SQL Injection Vulnerabililty
• PHPMyFAQ Multiple Cross-Site Scripting Vulnerabilities
• PHPMyFAQ Local File Include Vulnerability
• PHPMyFAQ Logs Unauthorized Access Vulnerability
• UNU Networks MailGust User_email.PHP SQL Injection Vulnerability

RELATED STUFF

• Multiple Mozilla Browser/Firefox Vulnerabilities
  Make sure to upgrade to versions Firefox/Mozilla.