Full Disclosure: Kernelpanik Labs Digest 2005-2

["Kernelpanik Labs - Security Lists" <seclists () kernelpanik org>]

Hi,

This is a email digest with security fails recently published by
Kernelpanik Labs (http://www.kernelpanik.org).

paNews 2.0.4b
-------------
Remote SQL injection and command execution. 
Spanish: http://www.kernelpanik.org/docs/kernelpanik/panews.txt

cuteNews 1.3.6
--------------
Remote XSS and local command execution.
Spanish: http://www.kernelpanik.org/docs/kernelpanik/cutenews.txt

English version isn't available yet. That's is all. 

-- 
Kernelpanik Labs - kpk () kernelpanik org
http://www.kernelpanik.org
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html