Alerts from SecurityFocus Newsletter #363
APPLICATIONS USING PHP
- Joomla Webring Component Admin.Webring.Docs.PHP SQL Injection Vulnerability
- PHP-Nuke AutoHTML Module Local File Include Vulnerability
- Horde Products Search.PHP Cross-Site Scripting Vulnerability
- Mambo Email Publisher Help.MMP.PHP Remote File Include Vulnerability
- Mensajeitor HTTP CLIENT IP HTML Injection Vulnerability
- WP-DB Backup For Wordpress Edit.PHP Directory Traversal Vulnerability
- Mambo Peoplebook Component Param.PeopleBook.PHP Remote File Include Vulnerability
- Zen Cart Multiple SQL Injection Vulnerabilities
- ProjectButler RootDIR Parameter Multiple Remote File Include Vulnerabilities
- Extreme Media Board MemCP.PHP Local File Include Vulnerability
- YaBBSE Index.PHP Cross-Site Scripting Vulnerability
- WikiWebWeaver Index.PHP Arbitrary File Upload Vulnerability
- Lizge Index.PHP Multiple Remote File Include Vulnerabilities
- PHProjekt Multiple Remote File Include Vulnerabilities
- WEBInsta Mailing List Manager InitDB.PHP Remote File Include Vulnerability
- phPay Nu_mail.inc.PHP Open Email Relay Vulnerability
- VWar Multiple Input Validation Vulnerabilities
- Discloser Multiple Remote File Include Vulnerabilities
RELATED STUFF
- MIT Kerberos 5 Multiple Local Privilege Escalation Vulnerabilities
Upgrade to version 1.5.1 or 1.4.4. Complete coverage is in MIT's Security Advisory MITKRB5-SA-2006-001. - Mozilla Firefox XML Handler Race Condition Memory Corruption Vulnerability
- Mozilla Firefox JavaScript Handler Race Condition Memory Corruption Vulnerability
- ImageMagick SGI Image File Remote Heap Buffer Overflow Vulnerability
