Alerts from SecurityFocus Newsletter #377

Summarized by Daniel Convissor

APPLICATIONS USING PHP

• Movable Type Unspecified Cross-Site Scripting Vulnerability
• VBulletin Admin Control Panel Index.PHP Multiple Cross-Site Scripting Vulnerabilities
• Pearl Forums for Mambo Multiple Remote File Include Vulnerabilities
• PHP Poll Creator Relativer_PFAD Parameter Multiple Remote File Include Vulnerabilities
• Powies MatchMaker Matchdetail.PHP SQL Injection Vulnerability
• Powie's PHP Forum EditPoll.PHP SQL Injection Vulnerability
• MXBB Calsnails Module MX_Common.PHP Remote File Include Vulnerability
• Boonex Dolphin Index.php Remote File Include Vulnerability
• Blog:CMS List.PHP Cross-Site Scripting Vulnerability
• Dev4U CMS Index.PHP Multiple Input Validation Vulnerabilities
• Travelsized CMS Index.PHP Multiple Cross-Site Scripting Vulnerabilities
• PHP Upload Tool Arbitrary File Upload and Directory Traversal Vulnerabilities
• Etomite CMS Multiple Input Validation Vulnerabilities
• BirdBlog Multiple Cross-Site Scripting Vulnerabilities
• GrimBB Multiple Unspecified Cross-Site Scripting Vulnerabilities
• DoSePa Information Disclosure Vulnerability