PHP Vulnerabilities and new updates
N-Stalker has made available the latest database update (v170) for N-Stealth Web Security Scanner.
You should be able to receive it automatically next time you execute the scanner.
 |
to manually download it, use the url: https://secure.nstalker.com/customercenter/ |
If you need any additional assistance during this process, please, contact us at:
E-mail: support at nstalker (24hs) or
Phone: +55-11-3675-7093 (9am to 18pm GMT-0300)
This release has included the following vulnerabilities:
- PHP 4.4.1/5.5.1 MySQLI Error Logging Remote Format String Vulnerability
- PHP 4.4.1/5.5.1 PHPInfo Cross-Site Scripting Vulnerability
- PmWiki 2.0.12 Search Cross-Site Scripting Vulnerability
- Virtual Hosting Control System 2.4.6.2 Error Message Cross-Site Scripting Vulnerability
- PHPPost 1.0 Multiple Cross-Site Scripting Vulnerabilities
- Tru-Zone Nuke ET 3.2 Search Module SQL Injection Vulnerability
- PHP Download Manager 1.1.3 Files.PHP SQL Injection Vulnerability
- APBoard Thread.PHP SQL Injection Vulnerability
- Apache Struts 1.2.7 Error Response Cross-Site Scripting Vulnerability
- PHPComasy 0.7.5 Index.PHP SQL Injection Vulnerability
- SimplePoll Results.PHP SQL Injection Vulnerability
- Advanced Poll 2.0.3 Popup.PHP Cross-Site Scripting Vulnerability
- MediaWiki 1.5 beta3 HTML Inline Style Attributes Unspecified Cross-Site Scripting Vulnerability
- PHPMyAdmin 2.6.4 Multiple Cross-Site Scripting Vulnerabilities
- PHPMyAdmin 2.6.3-pl1 Error.PHP Cross-Site Scripting Vulnerability
- VP-ASP Shopping Cart 5.50 Shopadmin.ASP HTML Injection Vulnerability
- Revize CMS HTTPTranslatorServlet Cross-Site Scripting Vulnerability
- FUDForum 2.6.15 Tree View Access Validation Vulnerability
- Revize CMS Query_results.JSP SQL Injection Vulnerability
- Revize CMS Revize.XML Information Disclosure Vulnerability
- PHPLDAPAdmin 0.9.7 Welcome.PHP Multiple Vulnerabilities
- Pmachine Pro 2.4 Email This Entry Mail_autocheck.PHP Remote File Include Vulnerability
- PHPLDAPAdmin 0.9.5 Unauthorized Access Vulnerability
- Uresk Links 2.0 Admin Index.PHP Authentication Bypass Vulnerability
- Arki-DB 2.0 Index.PHP SQL Injection Vulnerability
- Unclassified 1.5.3a NewsBoard Forum.PHP SQL Injection Vulnerability
- PHPWebThings 1.4 MSG Parameter SQL Injection Vulnerability
- Antharia OnContent // CMS Index.PHP SQL Injection Vulnerability
- PHPWebThing 0.4.4 Forum.PHP SQL Injection Vulnerability
- AudienceView Error.ASP Cross-Site Scripting Vulnerability
- JAWS 0.5.2 Remote File Include Vulnerability
- GeSHI 1.0.7.2 Example.PHP Local File Include Vulnerability
- Pearl Forums 2.0 Index.PHP Local File Include Vulnerability
- MyBulletinBoard 1.0PR2 Multiple HTML Injection Vulnerabilities
- PHPMyAdmin 2.7.0-beta1 Header_HTTP_Inc.PHP HTTP Response Splitting Vulnerability
- MyBulletinBoard 1.0 Usercp.PHP SQL Injection Vulnerability
- PHPNuke 7.8 Search Module SQL Injection Vulnerability
- phpAdsNew 2.0.6 Lib-sessions.inc.PHP SQL Injection Vulnerability
- Peel 2.7 rubid Parameter SQL Injection Vulnerability
- TikiWiki 1.8.5 Tiki-User_Preferences.PHP Directory Traversal Vulnerability
- TikiWiki 1.8.5 Tiki-Editpage.PHP Directory Traversal Vulnerability
- YaBB 2.0 Image Upload HTML Injection Vulnerability
- YaBB SE 1.5.1 News.PHP Remote File Include Vulnerability
N-Stealth DB General Information
Version: 170
Release Date: 01/29/2006
