Alerts from SecurityFocus Newsletter #342

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• PHPMyAdmin Set_Theme Cross-Site Scripting Vulnerability
• Inprotect Zones.PHP Cross-Site Scripting Vulnerability
• Oxynews Index.PHP SQL Injection Vulnerability
• SPIP Research Module Cross-Site Scripting Vulnerability
• gCards Multiple Input Validation Vulnerabilities
• SoftBB Reg.PHP SQL Injection Vulnerability
• Maian Weblog Multiple SQL Injection Vulnerabilities
• Streber Unspecified HTML Injection Vulnerability
• CutePHP CuteNews Function.PHP Local File Include Vulnerability
• Noah's Classifieds Index.PHP Multiple Cross-Site Scripting Vulnerabilities
• Light Weight Calendar Cal.PHP Remote Command Execution Vulnerability
• Skull-Splitter PHP Guestbook HTML Injection Vulnerability
• PHPWebSite Multiple SQL Injection Vulnerabilities
• MusicBox Multiple Input Validation Vulnerabilities
• Woltlab Burning Board Class_DB_MySQL.PHP Cross-Site Scripting Vulnerability
• ExtCalendar Cross-Site Scripting Vulnerabilities
• Invision Power Board Multiple Cross-Site Scripting Vulnerabilities

RELATED STUFF

• cURL / libcURL TFTP URL Parser Buffer Overflow Vulnerability
  Upgrade to version 7.15.3.