Alerts from SecurityFocus Newsletter #360

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• MyBB Usercp.PHP HTML Injection Vulnerability
• Chameleon LE Index.PHP Directory Traversal Vulnerability
• PHP Live Css_Path Remote File Include Vulnerability
• Advanced Poll Common.Inc.PHP Remote File Include Vulnerability
• PHP Forge Cfg_Racine Remote File Include Vulnerability
• Prince Clan Chess Club Include.PCchess.PHP Remote File Include Vulnerability
• Multiple RadScript Products Authentication Bypass Vulnerability
• ActionApps Multiple Remote File Include Vulnerabilities
• MusicBox Page Parameter SQL Injection Vulnerability
• PHP Pro Bid Multiple Input Validation Vulnerabilities
• Etomite CMS Rfiles.PHP Arbitrary File Upload Vulnerability
• SNews Search_Query Cross-Site Scripting Vulnerability
• PHPSavant Savant2 Multiple Remote File Include Vulnerabilities
• Etomite Index.PHP SQL Injection Vulnerability
• LinksCaffe Multiple Input Validation Vulnerabilities
• Lussumo Vanilla RootDirectory Remote File Include Vulnerability
• Moodle Moodle.PHP Remote File Include Vulnerability
• X7 Chat Upgradev1.PHP SQL Injection Vulnerability
• MoSpray Component Multiple Remote File Include Vulnerabilities
• Fire-Mouse TopList Add.PHP HTML Injection Vulnerability
• Micro Guestbook Add.PHP HTML Injection Vulnerability
• BLOG:CMS ID Parameter Cross-Site Scripting Vulnerability

RELATED STUFF

• GnuPG Parse_Comment Remote Buffer Overflow Vulnerability
  Upgrade to 1.4.5.