CVE-2014-7265: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in LinPHA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

LinPHA 1.3.4 - Multiple Vulnerabilities

No description provided by source. Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF Date: 28/01/2014 Exploit Author: [email protected] Vendor Homepage: http://sourceforge.net/projects/linpha/ Software Link: http://sourceforge.net/projects/linpha/files/latest/download Version: 1.3.4 Tested on:...

LinPHA Photo Gallery 2.0 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------------------------------------------------- INFORMATIONS...

LinPHA 0.9.x/1.0 forth_stage_install.php language Variable POST Method Local File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/16592/info LinPHA is prone to multiple local file-inclusion and PHP code-injection vulnerabilities. The local file-inclusion issues are due to insecure use of the 'includeonce' PHP function in multiple scripts. The PHP...

LinPHA <= 1.3.1 (new_images.php) Remote Blind SQL Injection Exploit

No description provided by source. ?php / LinPHA = 1.3.1 newimages.php Remote Blind SQL Injection Hash Fishing Exploit / BENCHMARK method author...: EgiX mail.....: n0b0d1esathotmaildotcom link.....: http://linpha.sourceforge.net/ dork.....: LinPHA Version 1.3.x or The LinPHA developers vulnerabl...

LinPHA 1.3.2/1.3.3 new_images.php XSS

No description provided by source. source: http://www.securityfocus.com/bid/34500/info LinPHA is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Attackers can leverage these issues to execute arbitrary script code in the...

LinPHA 0.9.x/1.0 index.php lang Parameter Local File Inclusion

在传入lang参数时没有对包含的本地文件路径做过滤和隔断,导致本地文件包含 http://www.example.com/host/docs/index.php?lang=/../../../../../../../../../../etc/passwd...

LinPHA 0.9.x/1.0 install.php language Parameter Local File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/16592/info LinPHA is prone to multiple local file-inclusion and PHP code-injection vulnerabilities. The local file-inclusion issues are due to insecure use of the 'includeonce' PHP function in multiple scripts. The PHP...

LinPHA <= 1.3.2 - (rotate.php) Remote Command Execution Vulnerability

No description provided by source. /'\ /\ \ /'\ /\ /\/\L\ \ \ \ ,/\ /\ \ /\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ /'\ / \ /' \ \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ //\ \L\ /\ /\ /\ \ \ \ \ \\ \ \ /\ \\ \\ /\ \ /\ \ /\ \ \ \ //////\ \ // // // // //...

LinPHA 1.1 - Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/17581/info LinPHA is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

LinPHA <= 1.3.3 (maps plugin) Remote Command Execution Exploit

No description provided by source. ?php / -------------------------------------------------------------- LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

LinPHA 0.9.x/1.0 sec_stage_install.php language Parameter Local File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/16592/info LinPHA is prone to multiple local file-inclusion and PHP code-injection vulnerabilities. The local file-inclusion issues are due to insecure use of the 'includeonce' PHP function in multiple scripts. The PHP...

LinPHA 1.3.2/1.3.3 login.php XSS

No description provided by source. source: http://www.securityfocus.com/bid/34500/info LinPHA is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Attackers can leverage these issues to execute arbitrary script code in the...

LinPHA 1.3.4 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF Date: 28/01/2014 Exploit Author: email protected Vendor Homepage: http://sourceforge.net/projects/linpha/ Software Link: http://sourceforge.net/projects/linpha/files/latest/download Version:...

LinPHA 1.3.4 Cross Site Request Forgery / Cross Site Scripting

Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF Date: 28/01/2014 Exploit Author: [email protected] Vendor Homepage: http://sourceforge.net/projects/linpha/ Software Link: http://sourceforge.net/projects/linpha/files/latest/download Version: 1.3.4 Tested on: Virtualbox debian and Apache ===...

LinPHA 1.3.4 - Multiple Vulnerabilities

Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF Date: 28/01/2014 Exploit Author: [email protected] Vendor Homepage: http://sourceforge.net/projects/linpha/ Software Link: http://sourceforge.net/projects/linpha/files/latest/download Version: 1.3.4 Tested on: Virtualbox debian and Apache ===...

LinPHA 1.3.4 - Multiple Vulnerabilities

LinPHA 1.3.4 - Multiple Vulnerabilities Exploit Title: linPHA 1.3.4 - Pemanent XSS and CSRF Date: 28/01/2014 Exploit Author: [email protected] Vendor Homepage: http://sourceforge.net/projects/linpha/ Software Link: http://sourceforge.net/projects/linpha/files/latest/download Version: 1.3.4 Teste...

CVE-2011-3753

LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by viewer.php and certain other files...

Information disclosure

LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by viewer.php and certain other files...

CVE-2011-3753

LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by viewer.php and certain other files...