Information disclosure

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php...

PT-2011-4663

Name of the Vulnerable Software and Affected Versions PHPDevShell version 3.0.0-Beta-4b Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by requesting the gzip.php file, which reveals the installation path in a...

CVE-2011-3773: Exposure of Sensitive Information to an Unauthorized Actor

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php...

Local file inclusion in Farsinews3.0BETA1

if magicquotesgpc is Off in php.ini then local file inclusion in /jscripts/tinymce/tinymcegzip.php is available to use;!! why? codejscripts/tinymce/tinymcegzip.php ... $theme = isset$REQUEST'theme' ? $REQUEST'theme' : ""; $language = isset$REQUEST'language' ? $REQUEST'language' : ""; $plugins =...