CVE-2011-3753

CVE-2011-3753 affects LinPHA 1.3.4. A remote attacker can obtain sensitive information by requesting a specific PHP file (e.g., viewer.php), triggering an error message that reveals the installation path. This is a direct information-disclosure vulnerability, not requiring authentication. The ava...

CVE-2011-3753: Exposure of Sensitive Information to an Unauthorized Actor

LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by viewer.php and certain other files...

LinPHA Photo Gallery 1.3.2 Command Execution

/'\ /\ \ /'\ /\ /\/\L\ \ \ \ ,/\ /\ \ /\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ /'\ / \ /' \ \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ //\ \L\ /\ /\ /\ \ \ \ \ \\ \ \ /\ \\ \\ /\ \ /\ \ /\ \ \ \ //////\ \ // // // // // ////// ////// \ / //...

LinPHA <= 1.3.2 (rotate.php) Remote Command Execution Vulnerability

Exploit for php platform in category web applications =================================================================== LinPHA = 1.3.2 rotate.php Remote Command Execution Vulnerability =================================================================== /'\ /\ \ /'\ /\ /\/\L\ \ \ \ ,/\ /\ ...

LinPHA 1.3.2 - 'rotate.php' Remote Command Execution

/'\ /\ \ /'\ /\ /\/\L\ \ \ \ ,/\ /\ \ /\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ /'\ / \ /' \ \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ //\ \L\ /\ /\ /\ \ \ \ \ \\ \ \ /\ \\ \\ /\ \ /\ \ /\ \ \ \ //////\ \ // // // // // ////// ////// \ / //...

LinPHA 1.3.2 - rotate.php Remote Command Execution

LinPHA 1.3.2 - rotate.php Remote Command Execution /'\ /\ \ /'\ /\ /\/\L\ \ \ \ ,/\ /\ \ /\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ /'\ / \ /' \ \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ //\ \L\ /\ /\ /\ \ \ \ \ \\ \ \ /\ \\ \\ /\ \ /\ \ /\ \ \ \ //////\ \ //...

CVE-2008-7223

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, or 5 plugins/stats/statsview.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, or 5 plugins/stats/statsview.php...

CVE-2008-7223

CVE-2008-7223 describes multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3, allowing remote attackers to inject arbitrary script/HTML via (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php, or (5) plugins/stats/stats_view.php. The N...

CVE-2008-7223

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, or 5 plugins/stats/statsview.php...

CVE-2008-7223: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, or 5 plugins/stats/statsview.php...

LinPHA Detection

Detects the installed version of LinPHA, a photo/image archive/album/gallery written in PHP. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

LinPHA 1.3.4 Multiple Cross-Site Scripting Vulnerabilities

LinPHA is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:linpha:linpha";...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.4 might allow remote attackers to inject arbitrary web script or HTML via 1 newimages.php, 2 login.php, and unspecified vectors...

CVE-2008-6571

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.4 might allow remote attackers to inject arbitrary web script or HTML via 1 newimages.php, 2 login.php, and unspecified vectors...

CVE-2008-6571

The CVE-2008-6571 entry concerns LinPHA (before 1.3.4) with multiple XSS vulnerabilities exposed through login.php and new_images.php (and unspecified vectors). The Red Hat, NVD, Exploit DB, and CVE records consistently state that the issue stems from insufficient input sanitization, allowing rem...

CVE-2008-6571

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.4 might allow remote attackers to inject arbitrary web script or HTML via 1 newimages.php, 2 login.php, and unspecified vectors...

CVE-2008-6571: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.4 might allow remote attackers to inject arbitrary web script or HTML via 1 newimages.php, 2 login.php, and unspecified vectors...

LinPHA Photo Gallery 2.0 Alpha Command Execution

!/usr/bin/perl ----------------------------------------------------------------------------------------------------------------------- INFORMATIONS ----------------------------------------------------------------------------------------------------------------------- LinPHA Photo Gallery 2.0 Alph...

LinPHA Photo Gallery 2.0 Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl ----------------------------------------------------------------------------------------------------------------------- INFORMATIONS...