webapp vulns with no cve

[Hanno Böck <hanno () hboeck de>]

Hi,

I sent you this a while back, but seems it got lost (?).

I found a couple of web applications with vulnerabilities without a CVE-ID:

punbb:
http://sektioneins.de/advisories/SE-2008-01.txt
http://punbb.org/forums/viewtopic.php?id=18460
http://www.milw0rm.com/exploits/5165


Phorum sql injection:
http://www.phorum.org/phorum5/read.php?64,126815,126815

freewebshop (fix in 2.2.7)
http://www.freewebshop.org/?Downloads:Fixes

linpha 1.3.3 fixes xss:
http://linpha.sourceforge.net/wiki/index.php/Release_Notes#Version_1.3.3

-- 
Hanno Böck              Blog:           http://www.hboeck.de/
GPG: 3DBD3B20           Jabber/Mail:    hanno () hboeck de

Attachment: signature.asc
Description: This is a digitally signed message part.