PHP vulnerabilities (48 new sigs added)
N-Stalker has made available the latest database update (v133) for N-Stealth Web Security Scanner.
You should be able to receive it automatically next time you execute the scanner (to manually download it, use the url
https://secure.nstalker.com/customercenter/).
If you need any additional assistance during this process, please, contact us at:
E-mail: click here (24hs) or
Phone: +55-11-3675-7093 (9am to 18pm GMT-0300)
This release has included the following vulnerabilities:
- Webmatic 1.8 Unspecified Security Vulnerability
- SWsoft Plesk Reloaded 7.1 Login_name Parameter Cross-Site Scripting Vulnerability
- WebAPP 0.9.9 Directory Traversal Vulnerability
- Easy File Sharing Web Server 1.25 Access Control Bypass Vulnerability
- Easy File Sharing Web Server 1.25 Remote Denial Of Service Vulnerability
- PHP Code Snippet 0.8 Library Multiple Cross-Site Scripting Vulnerabilities
- Dynix WebPac Multiple Undisclosed SQL Injection Vulnerabilities
- JShop E-Commerce Suite v3 Page.PHP Cross-Site Scripting Vulnerability
- Compulsive Media CNU5 News.mdb Database Disclosure Vulnerability
- PhotoADay Pad_selected Parameter Cross-Site Scripting Vulnerability
- INL Ulog-php 0.8.1 Port.PHP SQL Injection Vulnerability
- Axis Network Camera And Video Server Multiple Vulnerabilities
- EGroupWare 1.0.3 Multiple Input Validation Vulnerabilities
- Sympa 4.1.2 New List HTML Injection Vulnerability
- Mantis 0.19a Multiple Cross-Site Scripting Vulnerabilities
- Mantis 0.19a Remote Server-Side Script Execution Vulnerability
- Mantis 0.19a New Account Signup Mass Emailing Vulnerability
- MyDMS 1.4.2 SQL Injection Vulnerability And Directory Traversal Vulnerability
- Working Resources BadBlue Webserver 2.5 Denial Of Service Vulnerability
- Nihuo Web Log 1.6 Analyzer HTML Injection Vulnerability
- Zixforum ZixForum.mdb Database Disclosure Vulnerability
- PlaySMS 0.7 Valid Function SQL Injection Vulnerability
- PHP-Fusion 4.0 Database Backup Information Disclosure Vulnerability
- Merak Mail Server 7.4.5 Webmail Multiple Vulnerabilities
- Gallery 1.4.4 Remote Server-Side Script Execution Vulnerability
- CuteNews 1.3.1 show_archives.php Cross-Site Scripting Vulnerability
- AWStats 6.2 Rawlog Plugin Logfile Parameter Input Validation Vulnerability
- PScript PForum 1.25 User Profile HTML Injection Vulnerability
- MediaWiki 1.3 Remote File Include Vulnerability
- RaXnet Cacti 0.8.5 Auth_Login.PHP SQL Injection Vulnerability
- QuiXplorer 2.3 Item Parameter Directory Traversal Vulnerability
- PHPMyWebHosting 0.3.4 SQL Injection Vulnerability
- Mercantec Softcart 4.0.0 CGI Buffer Overflow Vulnerability
- Moodle 1.3.3 Text Strings Vulnerability
- IceWarp Web Mail 5.2.7 Multiple Remote Vulnerabilities
- PluggedOut Blog 1.60 Calendar Module Cross-Site Scripting Vulnerability-
- PHPGroupWare 0.9.16 Plaintext Cookie Authentication Credentials Information Disclosure
- Simple Form 2.1 Unauthorized Mail Relay Vulnerability
N-Stealth DB General Information
Version: 133
Release Date: 09/06/2004

