Alerts from SecurityFocus Newsletter #330

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• Round Cube Webmail Path Disclosure Weakness
• PHP Fusebox Index.PHP Cross-Site Scripting Vulnerability
• JPortal Forum Forum.PHP SQL Injection Vulnerability
• PlaySMS Index.PHP Cross-Site Scripting Vulnerability
• Box UK Amaxus CMS Cross-Site Scripting Vulnerability
• Adaptive Website Framework Cross-Site Scripting Vulnerability
• Caravel CMS Multiple Cross-Site Scripting Vulnerabilities
• Contenite ID Parameter Cross-Site Scripting Vulnerability
• Esselbach Storyteller CMS Search Module Cross-Site Scripting Vulnerability
• FLIP Multiple Cross-Site Scripting Vulnerabilities
• Libertas Enterprise CMS Index.PHP Cross-Site Scripting Vulnerability
• ContentServ Index.PHP SQL Injection Vulnerability
• Direct News Index.PHP SQL Injection Vulnerability
• ODFaq FAQ.PHP SQL Injection Vulnerability
• Marwel Index.PHP SQL Injection Vulnerability
• Miraserver Multiple SQL Injection Vulnerabilities
• Bitweaver Multiple Input Validation Vulnerabilities
• myEZshop Shopping Cart Multiple Input Validation Vulnerabilities
• Komodo CMS Multiple Input Validation Vulnerabilities
• PHPGedView Multiple Remote Script Code Execution Vulnerabilities
• Enterprise Connector Main.PHP SQL Injection Vulnerability
• AbleDesign ReSearch Search Cross-Site Scripting Vulnerability
• AbleDesign D-Man Title Parameter Cross-Site Scripting Vulnerability
• Tolva Usermods.PHP Remote File Include Vulnerability
• Beehive Forum Multiple HTML Injection Vulnerabilities
• Papaya CMS Cross-Site Scripting Vulnerability
• SPIP Multiple Cross-Site Scripting Vulnerabilities
• Papoo Multiple SQL Injection Vulnerabilities
• PHPSlash Article.PHP SQL Injection Vulnerability