126 matches found
LinPHA Photo Gallery 2.0 Remote Command Execution Exploit
Exploit for unknown platform in category web applications ========================================================= LinPHA Photo Gallery 2.0 Remote Command Execution Exploit ========================================================= !/usr/bin/perl...
LinPHA Photo Gallery 2.0 - Remote Command Execution
LinPHA Photo Gallery 2.0 - Remote Command Execution !/usr/bin/perl ----------------------------------------------------------------------------------------------------------------------- INFORMATIONS...
Directory traversal
plugins/maps/dbhandler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and execute arbitrary local files by placing directory traversal sequences into t...
CVE-2008-1856
plugins/maps/dbhandler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and execute arbitrary local files by placing directory traversal sequences into t...
CVE-2008-1856
plugins/maps/dbhandler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and execute arbitrary local files by placing directory traversal sequences into t...
CVE-2008-1856
The CVE affects LinPHA
CVE-2008-1856: Improper Input Validation
plugins/maps/dbhandler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and execute arbitrary local files by placing directory traversal sequences into t...
linpha-exec.txt
?php / -------------------------------------------------------------- LinPHA = 1.3.2 maps plugin Remote Command Execution Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://linpha.sourceforge.net details..: wor...
LinPHA 1.3.3 Plugin Maps - Remote Command Execution
?php / -------------------------------------------------------------- LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://linpha.sourceforge.net details..: wor...
LinPHA <= 1.3.3 (maps plugin) Remote Command Execution Exploit
No description provided by source. ?php / -------------------------------------------------------------- LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
LinPHA 1.3.3 Plugin Maps - Remote Command Execution
LinPHA 1.3.3 Plugin Maps - Remote Command Execution ?php / -------------------------------------------------------------- LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...
LinPHA <= 1.3.3 (maps plugin) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ============================================================== LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit ============================================================== ?php /...
CVE-2008-1487
Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, and 5 plugins/stats/statsview.php...
CVE-2008-1487
LinPHA contains multiple cross-site scripting (XSS) vulnerabilities in versions before 1.3.3. Attack vectors include (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php, and (5) plugins/stats/stats_view.php. The issue is described across CVE-2008-1487 entri...
CVE-2008-1487
Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, and 5 plugins/stats/statsview.php...
CVE-2008-1487: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, and 5 plugins/stats/statsview.php...
linpha131-sql.txt
order = $REQUEST'order'; 188. 189. if$defaultorder != $REQUEST'order' 190. 191. $this-linkaddress .= '&order='.$REQUEST'order'; 192. 193. 194. else 195. 196. $this-order = $defaultorder; 197. 198. 199. 200. // 201. // set sql query string 202. // 203. function setSql$sqlbegin,$sqlwhere 204. 205...
LinPHA < 1.3.2 SQL Injection Vulnerability
Binary data 4150.prm...
Sql injection
SQL injection vulnerability in include/imgview.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the order parameter to newimages.php...