Alerts from SecurityFocus Newsletter #331

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• SimpBook Guestbook HTML Injection Vulnerability
• Cerberus Helpdesk Multiple Input Validation Vulnerabilities
• Dev Web Management System Multiple Input Validation Vulnerabilities
• PHPSurveyor SID Parameter SQL Injection Vulnerability
• Koobi BBCode URL Tag Script Injection Vulnerability
• PHPDocumentor Remote and Local File Include Vulnerabilities
• PHPDocumentor Forum Lib Variable Cross-Site Scripting Vulnerability
• MyBB Globa.PHP Cookie Data SQL Injection Vulnerability
• TinyMCE Compressor Multiple Vulnerabilities
• PHPBB Multiple Unspecified Remote Input Validation Vulnerabilities
• Ades Design AdesGuestbook Read Script Cross-Site Scripting Vulnerability
• OOApp Guestbook Home Script Cross-Site Scripting Vulnerability
• iPei Guestbook Index.PHP Cross-Site Scripting Vulnerability
• Kayako SupportSuite Multiple Cross-Site Scripting Vulnerabilities
• MyBB Print Thread Script HTML Injection Vulnerability
• MyBB File Upload SQL Injection Vulnerability