Alerts from SecurityFocus Newsletter #347

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• Clansys Index.PHP Remote Code Execution Vulnerability
• My Gaming Ladder Stats.PHP Remote File Include Vulnerability
• CoreNews Multiple Input Validation Vulnerabilities
• Simplog ImageList.PHP Cross-Site Scripting Vulnerability
• MKPortal Multiple Input Validation Vulnerabilities
• dForum Multiple Remote File Include Vulnerabilities
• Instant Photo Gallery Multiple Cross-Site Scripting Vulnerabilities
• Invision Power Board Search.PHP Script Injection Vulnerability
• Invision Power Board Index.PHP CK Parameter SQL Injection Vulnerability
• PHPWebFTP Multiple Cross-Site Scripting Vulnerabilities
• NextAge Shopping Cart Multiple HTML Injection Vulnerabilities
• Photokorn Multiple SQL Injection Vulnerabilities
• RateIt Rateit.PHP SQL Injection Vulnerability
• Built2go Movie Review Movie_CLS.PHP3 Remote File Include Vulnerability
• Help Center Live OSTicket Module Multiple SQL Injection Vulnerabilities
• FlexBB Multiple Input Validation Vulnerabilities
• SL_site Gallerie.PHP Information Disclosure Vulnerability
• PHPMyAgenda Agenda.PHP3 Remote File Include Vulnerability
• SL_site Multiple Input Validation Vulnerabilities
• Scry Gallery Index.PHP Cross-Site Scripting Vulnerability

RELATED STUFF

• Mozilla Firefox iframe.contentWindow.focus Buffer Overflow Vulnerability
  This exists in the new 1.5.0.2 release and probably earlier releases.