Alerts from SecurityFocus Newsletter #340

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• Invision Power Board Showtopic SQL Injection Vulnerability
• VBZoom Forum Show.PHP MainID SQL Injection Vulnerability
• PEHEPE Membership Management System Remote PHP Script Code Injection Vulnerability
• PEHEPE Membership Management System Sol_menu.PHP Cross-Site Scripting Vulnerability
• VBulletin Profile.PHP Email Field HTML Injection Vulnerability
• PluggedOut Nexus forgotten_password.PHP SQL Injection Vulnerability
• UKiWEB UKiBoard FCE.PHP BBCode HTML Injection Vulnerability
• DCI-Designs Dawaween Poems.PHP SQL Injection Vulnerability
• SMBlog Arbitrary PHP Command Execution Vulnerability
• Noah's Classifieds Index.PHP Multiple Cross-Site Scripting Vulnerabilities
• Noah's Classifieds Local File Include Vulnerability
• Noah's Classifieds Index.PHP Remote File Include Vulnerability
• Akarru Social BookMarking Engine Users.PHP SQL Injection Vulnerability
• CyBoards PHP Lite Process_post.PHP SQL Injection Vulnerability
• Fantastic News Archive.PHP Remote Code Execution Vulnerability
• D2-Shoutbox SQL Injection Vulnerability
• Evo-Dev evoBlog Comment Post HTML Injection Vulnerability
• Game-Panel Login.PHP Cross-Site Scripting Vulnerability
• M-Phorum Remote File Include Vulnerability
• Bitweaver Title Field HTML Injection Vulnerability
• RunCMS Bigshow.PHP Cross-Site Scripting Vulnerability
• VBZoom Profile.PHP Cross-Site Scripting Vulnerability
• DVGuestbook Multiple Cross-Site Scripting Vulnerabilities
• Sendcard Multiple Unspecified SQL Injection Vulnerabilities
• Limbo CMS Frontpage Arbitrary PHP Command Execution Vulnerability
• 4images Index.PHP Remote File Include Vulnerability

RELATED STUFF

• OpenSSH Remote PAM Denial Of Service Vulnerability
• Mozilla Thunderbird Multiple Remote Information Disclosure Vulnerabilities