|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  SecurityAlert Database |
||||
SecurityAlert : 633 CVE : CVE-2006-1397 SecurityRisk : Low  (About) Remote Exploit : Yes Local Exploit : No Exploit Available : No Credit : Matteo Beccati Published : 28.03.2006
Advisory Content : ======================================================================== phpAdsNew / phpPgAds security advisory PHPADSNEW-SA-2006-001 ------------------------------------------------------------------------ Advisory ID: PHPADSNEW-SA-2006-001 Date: 2006-Mar-27 Security risk: medium risk Applications affetced: phpAdsNew, phpPgAds Versions affected: <= 2.0.7 Versions not affected: >= 2.0.8 ======================================================================== ======================================================================== Vulnerability 1: HTML injection / Cross-site scripting ======================================================================== Description ----------- Some scripts inside the admin interface were displaying parameters collected by the delivery scripts without proper sanitizing or escaping. The delivery scripts have public access, while the admin interface is restricted to logged in users. An attacker could inject HTML/XSS code which could be displayed/executed in a later time inside the admin interface. Solution -------- - Upgrade to phpAdsNew or phpPgAds 2.0.8. ======================================================================== Vulnerability 2: HTML injection / Cross-site scripting ======================================================================== Description ----------- The login form was sending back to the browser the unmodified query string, making possible for an attacker to inject HTML/XSS code by using a specifically crafted URL. Solution -------- - Upgrade to phpAdsNew or phpPgAds 2.0.8. Contact informations ==================== The security contact for phpAdsNew and phpPgAds can be reached at: <security AT phpadsnew DOT com> Best regards -- Matteo Beccati http://phpadsnew.com http://phppgads.com  Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
libc:fts_*() Multiple Denial of Service
The fts functions are provided for traversing UNIX file hierarchies... |
||
| Apache |  |
|
» Apache Tomcat 6.0.20 and |
||
» Apache Tomcat 6.0.20 and |
||
» Apache Tomcat 6.0.20 and |
||
| PHP | |
|
- 2009-10-02| Copyright © SecurityReason.com. All Rights Reserved. |