Alerts from SecurityFocus Newsletter #350

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• phpMyAdmin Index.PHP Multiple Cross-Site Scripting Vulnerabilities
• YapBB Find.PHP SQL Injection Vulnerability
• PHPBB Unauthorized HTTP Proxy Vulnerability
• EZUserManager EZusermanager_pwd_forgott.PHP Remote File Include Vulnerability
• Sphider Search.PHP Multiple Cross-Site Scripting Vulnerabilities
• IceWarp Universal WebMail PHPSESSID Parameter Cross-Site Scripting Vulnerability
• PHPRemoteView PRV.PHP Multiple Cross-Site Scripting Vulnerabilities
• Lighthouse Development Squirrelcart Cart_Content.PHP Remote File Include Vulnerability
• Sugar Suite Open Source Multiple Remote and Local File Include Vulnerabilities
• Foing Multiple Remote File Include Vulnerabilities
• PHP Live Helper Chat.PHP Cross-Site Scripting Vulnerability
• phpCOIN Email Address Information Disclosure Vulnerability
• DeluxeBB SQL Injection Vulnerability
• Confixx Index.PHP Cross-Site Scripting Vulnerability
• NewsPortal Remote PHP Script Code Injection Vulnerability
• MonoChat HTML Injection Vulnerability
• BoastMachine Admin.PHP Cross-Site Scripting Vulnerability
• PHP-Fusion Srch_Where Parameter SQL Injection Vulnerability
• PAJAX Multiple Arbitrary PHP Code Execution Vulnerabilities
• Php Blue Dragon CMS VSDragonRootPath Parameter Remote File Include Vulnerability
• RadScripts RadLance Popup.PHP Local File Include Vulnerability
• PHPODP ODP.PHP Cross-Site Scripting Vulnerability
• WebCalendar Username Enumeration Vulnerability
• Gphotos Multiple Input Validation Vulnerabilities