Alertes sécurité des applications PHP et MySQL, édition 217

PHP et MySQL ne font l'objet d'aucune alerte de sécurité dans leurs versions courantes :
PHP 5.2.6 et 4.4.9; MySQL 5.0.67 (communauté) , 5.1.26 et 6.0.6.
Les mises à jour sont recommandées vers ces versions.

9 alertes de sécurité ont été émises cette semaine, concernant des applications suivantes :

Drupal, Gallery, Joomla, WordPress, Xoops, dotProject, ez, ming et vBulletin

• Drupal Security Update Fixes Multiple Security Bypass Vulnerab...
  
   http://www.frsirt.com/english/advisories/2008/2392 (3 visites)
  
  Site :  http://drupal.org/ (1 visite)


• Thickbox Gallery 'conf/admins.php' Information Disclosure Vulnerability
  
   http://www.securityfocus.com/bid/30845 (3 visites)
  
  Site :  http://gallery.sourceforge.net/ (2 visites)


• com_utchat component Mambo and Joomla! Component Multiple Remote File Include Vulnerabilities
  
   http://www.securityfocus.com/bid/30571 (7 visites)
  
  Site :  http://www.securityfocus.com/bid/30750 (2 visites)


• WordPress 'get_edit_post_link()' & 'get_edit_comment_link()' Multiple Eavesdropping Vulnerabilities
  
   http://wordpress.org/ (3 visites)
  
  Site :  http://www.secunia.com/advisories/31625/ (3 visites)


• Xoops PopnupBlog Module "index.php" Cross-Site Scripting
  
   http://www.xoops.org/ (1 visite)
  
  Site :  http://www.secunia.com/advisories/31681/ class=qq title=dotProject SQL Injection and CrossSite Scripting (1 visite)


• dotProject SQL Injection and Cross-Site Scripting
  
   http://www.dotproject.net/ (1 visite)
  
  Site :  http://www.secunia.com/advisories/31606/q class=q (1 visite)


• ezContents Multiple Local File Inclusion Vulnerabilities
  
   http://www.ez.no/ (1 visite)
  
  Site :  http://www.secunia.com/advisories/31562/ class= (1 visite)


• CCMS Gaming "id" SQL Injection Vulnerability
  
   http://sourceforge.net/projects/ming (1 visite)
  
  Site :  http://www.SecurityTracker.com/alerts/2008/Aug/1020727.html (1 visite)


• vBulletin Input Validation Hole in Private Message Title Field...
  
   http://www.vbulletin.com/ (1 visite)
  
  Site :  frsirt (1 visite)

•  phpsecure (6 visites)


•  secunia (2 visites)


•  securityfocus (2 visites)


•  securitytracker (1 visite)