Joomla Joomla!12Pictures Component File Inclusion

September 25, 2007 in Content Management, File Inclusions, vulnerabilities
Tags: Access Bypass, joomla, Joomla 1.0.x

• Application: Joomla
• Affected Version: Joomla!12Pictures 1.x
• URL: http://www.renevanasten.net/components.html
• Bug Type: Malicious Access
• Risk Level: High
• Solution: Edit the source code or look for patch file.

Invision Power Board Multiple Vulnerabilities – IPB 2.x

September 19, 2007 in Cross Site SCripting, Discussion Boards
Tags: Access Bypass, invision power board, IPB 2.x

• Application: Invision Power Board
• Affected Version: 2.x
• URL: http://www.invisionpower.com/community/board/
• Bug Type: Security bypass & Cross site scripting
• Risk Level: Medium
• Solution: Download the latest version. Apply the patch from vendor by refer instruction given.