Alerts from SecurityFocus Newsletter #364

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• OScommerce Shopping_cart.PHP SQL Injection Vulnerability
• Mambo EstateAgent Component mosConfig_absolute_path Remote File Include Vulnerability
• Mambo Display MOSBot Manager Component mosConfig_absolute_path Remote File Include Vulnerability
• Mambo BigAPE-Backup Component Remote File Include Vulnerability
• Mambo CatalogShop Component mosConfig_absolute_path Remote File Include Vulnerability
• Mambo AkoComment Module mosConfig_absolute_path Remote File Include Vulnerability
• Mambo CropImage Component mosConfig_absolute_path Remote File Include Vulnerability
• Fantastic Scripts Fantastic News Remote File Include Vulnerability
• Modernbill Config.PHP Remote File Include Vulnerability
• DieselScripts Diesel Paid Mail Getad.PHP Cross-Site Scripting Vulnerability
• DieselScripts DieselPay Index.PHP Cross-Site Scripting Vulnerability
• DieselScript Smart Traffic Index.PHP Remote File Include Vulnerability
• DieselScripts Job Site Forgot.PHP Multiple Cross-Site Scripting Vulnerabilities
• Plume CMS Multiple Remote File Include Vulnerabilities
• ToendaCMS TCMS_Administer Parameter Remote File Include Vulnerability
• PHPCodeGenie Core.PHP Remote File Include Vulnerability
• NES Game and NES System Multiple Remote File Include Vulnerabilities
• Tutti Nova Multiple Remote File Include Vulnerabilities
• Shadows Rising RPG Multiple Remote File Include Vulnerabilities
• XennoBB Icon_Topic SQL Injection Vulnerability
• RedBlog Index.PHP Remote File Include Vulnerability
• Doika Guestbook GBook.PHP HTML Injection Vulnerability
• Empire CMS Checklevel.PHP Remote File Include Vulnerability
• Business Management Systems Dolphin Remote File Include Vulnerability
• PHProjekt Content Management Module Multiple Remote File Include Vulnerabilities
• Multiple Docebo Products Multiple Remote File Include Vulnerabilities
• SquirrelMail Compose.PHP Multiple Information Disclosure and Data Modification Vulnerabilities
• Headline Portal Engine HPEInc Parameter Multiple Remote File Include Vulnerabilities
• TikiWiki Highlight Cross-Site Scripting Vulnerability
• CityForFree Indexcity List.PHP SQL Injection Vulnerability
• CityForFree Indexcity Cross-Site Scripting Vulnerability
• Woltlab Burning Board Attachment.php HTML Injection Vulnerability
• CloudNine Internet Solutions Links Manager Multiple Cross-Site Scripting Vulnerabilities
• CloudNine Internet Solutions Links Manager SQL Injection Vulnerability
• Eichhorn Portal Multiple Input Validation Vulnerabilities
• SportsPHool Remote File Include Vulnerability