Mantis Vulnerability and new updates

By N-Stalker Team on November 1, 2006

N-Stalker has made available the latest database update for its Web Application Security Assessment Products. Following the support life-cycle, we are still distributing updates for previous version.

You will be able to download it automatically in the following versions:

  • N-Stalker Web Application Security Scanner 2006 (Enterprise, QA and Infrastructure Edition)
    • WSI Update (N-Stalker Update Manager)
  • N-Stealth HTTP Security Scanner (database update 183)
    • Automatic DB Update

You should be able to receive it automatically next time you execute the scanner.

If you prefer to download it manually, please, use the following url: https://customer.nstalker.com.

If you need any additional assistance during this process, please, contact us at:
Web: Open new support ticket at https://customer.nstalker.com
E-mail: http://www.nstalker.com/about/contact (24hs) or
Phone: +55-11-3675-7093 (9am to 18pm GMT-0300)

This release has included the following vulnerabilities:

  • SaphpLesson 2.0 Print.PHP SQL Injection Vulnerability
  • EZHomePagePro 1.5 Multiple Cross-Site Scripting Vulnerabilities
  • Nuked-Klan 1.7.5 Index.PHP SQL Injection Vulnerability
  • Maian Weblog 2.0 Multiple SQL-Injection Vulnerabilities
  • Toast Forums 1.6 Toast.ASP Multiple Cross-Site Scripting Vulnerabilities
  • Online Quiz System Multiple Cross-Site Scripting Vulnerabilities
  • Pixel Motion Multiple SQL Injection Vulnerabilities
  • Caloris Planitia Technologies School Management System Cross-Site Scripting Vulnerability
  • Web Host Automation Ltd. Helm 3.2.10 Multiple Cross-Site Scripting Vulnerabilities
  • BlankOL 1.0 Bol.CGI Multiple Cross-Site Scripting Vulnerabilities
  • ClassifiedZONE 1.2 Accountlogon.CFM Cross-Site Scripting Vulnerability
  • RealestateZONE 4.2 Multiple Cross-Site Scripting Vulnerabilities
  • FusionZONE CouponZONE 4.2 Multiple SQL Injection Vulnerabilities
  • FusionZONE CouponZONE 4.2 Multiple Cross-Site Scripting Vulnerabilities
  • Web Host Automation Ltd. Helm 3.2.8 ForgotPassword.ASP Cross-Site Scripting Vulnerability
  • ActiveCampaign SupportTrio 2.50.2 Multiple Cross-Site Scripting Vulnerabilities
  • phpCOIN 1.2.2 Multiple Cross-Site Scripting Vulnerabilities
  • PHPmyfamily 1.4.1 Track.PHP Cross-Site Scripting Vulnerability
  • CONTROLzx HMS 3.3.4 Multiple Cross-Site Scripting Vulnerabilities
  • Connect Daily 3.2.9 Multiple Cross-Site Scripting Vulnerabilities
  • AL-Caricatier 2.5 Multiple Cross-Site Scripting Vulnerabilities
  • PHPKIT 1.6.03 Cross-Site Scripting Vulnerability
  • OneOrZero Helpdesk Index.PHP SQL Injection Vulnerability
  • PhxContacts 0.93.1 Multiple SQL Injection Vulnerabilities
  • PhxContacts 0.93.1 Login.PHP Cross-Site Scripting Vulnerability
  • Peercast.org PeerCast 0.1212 Remote Buffer Overflow Vulnerability
  • X-Changer 0.20 Multiple SQL Injection Vulnerabilities
  • MediaSlash Gallery Index.PHP Remote File Include Vulnerability
  • Mantis View_All_Set.PHP 1.0.1 Multiple Cross-Site Scripting Vulnerabilities

This entry was posted in N-Stalker Latest Updates. Bookmark the permalink.