Information disclosure

PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php...

Local file inclusion in Farsinews3.0BETA1

if magicquotesgpc is Off in php.ini then local file inclusion in /jscripts/tinymce/tinymcegzip.php is available to use;!! why? codejscripts/tinymce/tinymcegzip.php ... $theme = isset$REQUEST'theme' ? $REQUEST'theme' : ""; $language = isset$REQUEST'language' ? $REQUEST'language' : ""; $plugins =...