NYCPHP Meetup

[Daniel Convissor]

Alerts from SecurityFocus Newsletter #314

APPLICATIONS USING PHP
----------------------
PHPMyAdmin Cookie.Auth.Lib.PHP HTML Injection Vulnerability
http://www.securityfocus.com/bid/14674
This issue has been addressed in phpMyAdmin 2.6.4-rc1.

PHPMyAdmin Error.PHP Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/14675
This issue has been addressed in phpMyAdmin 2.6.4-rc1.

Land Down Under Signature HTML Injection Vulnerability
http://www.securityfocus.com/bid/14677

FUDforum Avatar Upload Arbitrary Script Upload Vulnerability
http://www.securityfocus.com/bid/14678

PHPWebNotes Api.PHP Remote File Include  Vulnerability
http://www.securityfocus.com/bid/14679

Simple PHP Blog Comment_Delete_CGI.PHP Directory Traversal Vulnerability
http://www.securityfocus.com/bid/14681

MyBB Member.PHP SQL Injection Vulnerability
http://www.securityfocus.com/bid/14684

AutoLinks Pro Al_initialize.PHP  Remote File Include Vulnerability
http://www.securityfocus.com/bid/14686

PHP-Fusion BBCode URL Tag Script Injection Vulnerability
http://www.securityfocus.com/bid/14688

Hesk Admin.PHP Authentication Bypass Vulnerability
http://www.securityfocus.com/bid/14692

PHPLDAPAdmin Unauthorized Access Vulnerability
http://www.securityfocus.com/bid/14694

PHPLDAPAdmin Welcome.PHP Multiple Vulnerabilities
http://www.securityfocus.com/bid/14695

e107 Forum_post.PHP Arbitrary Post Creation Vulnerability
http://www.securityfocus.com/bid/14699

FlatNuke ID Parameter Directory Traversal Vulnerability
http://www.securityfocus.com/bid/14702

FlatNuke USR Parameter Cross-Site Scripting Vulnerability
http://www.securityfocus.com/bid/14704

CMS Made Simple Lang.PHP Remote File Include Vulnerability
http://www.securityfocus.com/bid/14709

DownFile Multiple Cross-Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/14713

DownFile Administrator Unauthorized Access Vulnerability
http://www.securityfocus.com/bid/14714

GBook Multiple Unspecified Cross-Site Scripting Vulnerabilities
http://www.securityfocus.com/bid/14725

PBLang Bulletin Board System Multiple Remote Vulnerabilities
http://www.securityfocus.com/bid/14728


RELATED STUFF
-------------
Apache Mod_SSL SSLVerifyClient Restriction Bypass Vulnerability
http://www.securityfocus.com/bid/14721

OpenSSH DynamicForward Inadvertent GatewayPorts Activation Vulnerability
http://www.securityfocus.com/bid/14727

OpenSSH GSSAPI Credential Disclosure Vulnerability
http://www.securityfocus.com/bid/14729