Alerts from SecurityFocus Newsletter #352

Summarized by Daniel Convissor

While not listed this weeks newsletter, please note that MySQL and PostgreSQL both put out important security fixes.

APPLICATIONS USING PHP

• PHP-Nuke Multiple Remote File Include Vulnerabilities
• Achievo Class.employee.inc SQL Injection Vulnerability
• PHPBB-Amod Lang_Activity.PHP Remote File Include Vulnerability
• Geeklog Multiple Input Validation Vulnerabilities
• Blend Portal Blend_common.PHP Remote File Include Vulnerability
• F@cile Interactive Web P-Themes Cross-Site Scripting Vulnerability
• F@cile Interactive Web Multiple Remote File Include Vulnerabilities
• Photoalbum B&W Index.PHP Cross-Site Scripting Vulnerability
• 4nForum Modules.PHP SQL Injection Vulnerability
• Gnopaste Common.PHP Remote File Include Vulnerability
• ToendaCMS Index.PHP Cross-Site Scripting Vulnerability
• UBBThreads Index.PHP Cross-Site Scripting Vulnerability
• Open Searchable Image Catalogue Multiple Input Validation Vulnerabilities
• PPPBlog Randompic.PHP Directory Traversal Vulnerability
• PHPMyDesktop|arcade Index.PHP Local File Include Vulnerability
• Nivisec Hacks List Admin_hacks_list.PHP Information Disclosure Vulnerability
• Fastpublish CMS Multiple Remote File Include Vulnerabilities
• EVA-Web Multiple Cross-Site Scripting Vulnerabilities
• WikiNi Multiple HTML Injection Vulnerabilities

RELATED STUFF

• Mozilla Firefox Marquee Denial of Service Vulnerability