N-Stalker has made available the latest database update (v125) for N-Stealth Web Security Scanner.

This updates are available for the N-Stealth 5.5 version. If you are currently using an old version, please, contact us at:
E-mail: support@nstalker.com (24hs) or
Phone: +55-11-3675-7093 (9am to 18pm GMT-0300)
Download: https://secure.nstalker.com/customercenter/release.php

This release has included the following vulnerabilities:

– PHPWebSite 0.8.2 phpwsBB and phpwsContacts Modules Information Disclosure Vulnerability
– OpenBB 1.0.6 Private Message Disclosure Vulnerability
– OpenBB Arbitrary Avatar File Upload Vulnerability
– OpenBB 1.0.6 Multiple Input Validation Vulnerabilities
– PHP-Nuke 7.2 Multiple Video Gallery Module SQL Injection Vulnerabilities
– Artmedic Webdesign Hpmaker Script Multiple Vulnerabilities
– Netegrity SiteMinder Affiliate Agent Heap Overflow Vulnerability
– FusionPHP Fusion News 3.6.1 Cross-Site Scripting Vulnerability
– Network Query Tool 1.6 Cross-Site Scripting Vulnerability
– Advanced Guestbook 2.2 Password Parameter SQL Injection Vulnerability
– Modular Site Management System 0.2.1 Ver.asp Information Disclosure Vulnerability
– Multiple Protector System 1.15 Input Validation Vulnerabilities
– PHProfession 2.5 Multiple Vulnerabilities
– PostNuke Pheonix 0.726 Multiple Cross-Site Scripting And Path Disclosure Vulnerabilities
– Phorum 3.4.8 Phorum_URIAuth SQL Injection Vulnerability
– PHPBB 2.0.8 album_portal.php Remote File Include Vulnerability
– PHPBB 2.0.8 Common.php IP Address Spoofing Vulnerability
– PHPBugTracker 0.9.1 Multiple Input Validation Vulnerabilities
– Gemitel 3.50 Affich.PHP Remote File Include Command Injection Vulnerability
– Rhino Software Zaep AntiSpam 2.0.0.1 Cross-Site Scripting Vulnerability
– TUTOS 1.1 (20031017) Multiple Input Validation Vulnerabilities
– Ipswitch IMail Express 8.0.3 Web Messaging Buffer Overrun Vulnerability
– PHP-Nuke 7.2 CookieDecode Cross-Site Scripting Vulnerability
– PHP-Nuke 7.2 Multiple SQL Injection Vulnerabilities
– TikiWiki 1.8.1 Project Multiple Input Validation Vulnerabilities
– SurgeLDAP 1.0g User.CGI Directory Traversal Vulnerability
– Nuked-Klan 1.5 Multiple Vulnerabilities
– Blackboard 6.0 Learning System Multiple Cross-Site Scripting Vulnerabilities
– Open WebMail 2.3 Arbitrary Directory Creation Vulnerability

N-Stealth DB General Information
Version: 125
Release Date: 05/01/2004