Mantis vulnerabilities and new updates
N-Stalker has made available the latest database update (v167) for N-Stealth Web Security Scanner.
You should be able to receive it automatically next time you execute the scanner.
![]() |
to manually download it, use the url: https://secure.nstalker.com/customercenter/ |
If you need any additional assistance during this process, please, contact us at:
E-mail: support at nstalker (24hs) or
Phone: +55-11-3675-7093 (9am to 18pm GMT-0300)
This release has included the following vulnerabilities:
– PHP Handicapper Process_signup.PHP HTTP Response Splitting Vulnerability
– CutePHP CuteNews 1.4.1 Directory Traversal Vulnerability
– Simple PHP Blog 0.4.5 Multiple Input Validation Vulnerabilities
– Asus VideoSecurity Online Web Server 3.5 Directory Traversal Vulnerability
– PHPWebThing 0.4.4 Forum.PHP SQL Injection Vulnerability
– phpWebThings 0.4.4 Forum.PHP Cross-Site Scripting Vulnerability
– News2Net 3.0 Index.PHP SQL Injection Vulnerability
– XMB Forum 1.9.3 Post.PHP SQL Injection Vulnerability
– Belchior Foundry vCard Pro 3.1 Addrbook.PHP SQL Injection Vulnerability
– OaBoard 1.0 Forum.PHP Multiple SQL Injection Vulnerabilities
– PHPCafe Tutorial Manager Index.PHP SQL Injection Vulnerability
– Snitz Forum 2000 3.4.05 Post.ASP Cross-Site Scripting Vulnerability
– Invision Gallery 2.0.3 Index.PHP SQL Injection Vulnerability
– Subdreamer 2.2.1 Multiple Remote SQL Injection Vulnerabilities
– PHPESP 1.7.5 Multiple Unspecified Input Validation Vulnerabilities
– Search Enhanced Module 2.0 for PHP-Nuke HTML Injection Vulnerability
– ASP Fast Forum Error.ASP Cross-Site Scripting Vulnerability
– TikiWiki 1.9.1 Unspecified Cross-Site Scripting Vulnerability
– Hasbani 2.0 Web Server Malformed HTTP GET Request Remote Denial of Service Vulnerability
– FlatNuke 2.5.6 Index.PHP Cross-Site Scripting Vulnerability
– PBLang 4.65 Multiple Cross-Site Scripting Vulnerabilities
– CodeToSell ViArt Shop Enterprise 2.1.6 Multiple Cross-Site Scripting and HTML Injection Vulnerabilities
– Mantis 1.0 RC2 Multiple Unspecified SQL Injection Vulnerabilities
– MyBulletinBoard 1.0 PR2 Usercp.PHP SQL Injection Vulnerability
– SparkleBlog Multiple Injection Vulnerabilities
– eBASEweb 3.0 Unspecified SQL Injection Vulnerability
– Zomplog 3.4 Detail.PHP HTML Injection Vulnerability
N-Stealth DB General Information
Version: 167
Release Date: 12/16/2005