Alerts from SecurityFocus Newsletter #334

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• WP-Stats Author Parameter SQL Injection Vulnerability
• Benders Calendar Multiple SQL Injection Vulnerabilities
• Bit 5 Blog Index.PHP SQL Injection Vulnerability
• Bit 5 Blog AddComment.PHP HTML Injection Vulnerability
• White Album Pictures.PHP SQL Injection Vulnerability
• GeoBlog ViewCat.PHP SQL Injection Vulnerability
• EZDatabase Index.PHP Cross-Site Scripting Vulnerability
• CubeCart Multiple Cross-Site Scripting Vulnerabilities
• phpXplorer Workspaces.PHP Directory Traversal Vulnerability
• phpXplorer Action.PHP Directory Traversal Vulnerability
• RedKernel Referrer Tracker Rkrt_stats.PHP Cross-Site Scripting Vulnerability
• BlogPHP Index.PHP SQL Injection Vulnerability
• microBlog Index.PHP Multiple SQL Injection Vulnerabilities
• microBlog BBCode URL Tag Script Injection Vulnerability
• PHP Fusebox Index.PHP Cross-Site Scripting Vulnerability
• WebMobo WBNews Comments.PHP HTML Injection Vulnerability
• PowerPortal Multiple Cross-Site Scripting Vulnerabilities
• SMBCMS Local Site Search Cross-Site Scripting Vulnerability
• HTMLtoNuke HTMLtonuke.PHP Remote File Include Vulnerability
• AOblogger Multiple Input Validation Vulnerabilities
• Eggblog Multiple Input Validation Vulnerabilities
• SaralBlog Multiple Input Validation Vulnerabilities
• MyBB Signature HTML Injection Vulnerability
• PHlyMail Multiple Input Validation Vulnerabilities
• My Amazon Store Manager Search.PHP Cross-Site Scripting Vulnerability
• Netrix X-Site Manager Product_Details.PHP Cross-Site Scripting Vulnerability
• WebspotBlogging Login.PHP SQL Injection Vulnerability