Alerts from SecurityFocus Newsletter #376

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• Car Site Manager Multiple Input Validation Vulnerabilities
• PHPPeanuts Inspect.PHP Remote File Include Vulnerability
• XLineSoft PHPRunner PHPRunner.INI Local Information Disclosure Vulnerability
• Speedywiki Multiple Input Validation Vulnerabilities
• Portix-PHP Multiple HTML Injection Vulnerabilities
• Portix-PHP Multiple SQL Injection Vulnerabilities
• Xoops NewList.PHP Cross-Site Scripting Vulnerability
• ShopSystems Index.PHP SQL Injection Vulnerability
• ExoPHPdesk Pipe.PHP Remote File Include Vulnerability
• PHPKit Multiple SQL Injection Vulnerabilities
• EncapsCMS Core.PHP Remote File Include Vulnerability
• Drake CMS Index.PHP Cross-Site Scripting Vulnerability
  Subsequent research indicates this problem is not exploitable.
• Samedia LandShop LS.PHP Multiple Input Validation Vulnerabilities
• T.G.S. CMS Logout.PHP SQL Injection Vulnerability
• LetterIt Session.PHP Remote File Include Vulnerability
• GimeScripts Shopping Catalog Index.PHP Remote File Include Vulnerability
• Megamail Product_Review.PHP Multiple SQL Injection Vulnerabilities
• Omnistar Article Manager Multiple SQL Injection Vulnerabilities
• ContentNow Multiple Input Validation Vulnerabilities
• E-Xoopport Multiple Unspecified Security Vulnerabilities