CVE-2008-1856

plugins/maps/dbhandler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and execute arbitrary local files by placing directory traversal sequences into t...

CVE-2008-1856

The CVE affects LinPHA

linpha-exec.txt

?php / -------------------------------------------------------------- LinPHA = 1.3.2 maps plugin Remote Command Execution Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://linpha.sourceforge.net details..: wor...

LinPHA 1.3.3 Plugin Maps - Remote Command Execution

?php / -------------------------------------------------------------- LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://linpha.sourceforge.net details..: wor...

LinPHA 1.3.3 Plugin Maps - Remote Command Execution

LinPHA 1.3.3 Plugin Maps - Remote Command Execution ?php / -------------------------------------------------------------- LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom...

LinPHA <= 1.3.3 (maps plugin) Remote Command Execution Exploit

No description provided by source. ?php / -------------------------------------------------------------- LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit -------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...

LinPHA <= 1.3.3 (maps plugin) Remote Command Execution Exploit

Exploit for unknown platform in category web applications ============================================================== LinPHA = 1.3.3 maps plugin Remote Command Execution Exploit ============================================================== ?php /...

CVE-2008-1487

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, and 5 plugins/stats/statsview.php...

CVE-2008-1487

LinPHA contains multiple cross-site scripting (XSS) vulnerabilities in versions before 1.3.3. Attack vectors include (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php, and (5) plugins/stats/stats_view.php. The issue is described across CVE-2008-1487 entri...

CVE-2008-1487

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, and 5 plugins/stats/statsview.php...

linpha131-sql.txt

order = $REQUEST'order'; 188. 189. if$defaultorder != $REQUEST'order' 190. 191. $this-linkaddress .= '&order='.$REQUEST'order'; 192. 193. 194. else 195. 196. $this-order = $defaultorder; 197. 198. 199. 200. // 201. // set sql query string 202. // 203. function setSql$sqlbegin,$sqlwhere 204. 205...

LinPHA < 1.3.2 SQL Injection Vulnerability

Binary data 4150.prm...

CVE-2007-4053

SQL injection vulnerability in include/imgview.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the order parameter to newimages.php...

Sql injection

SQL injection vulnerability in include/imgview.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the order parameter to newimages.php...

CVE-2007-4053

SQL injection vulnerability in include/imgview.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the order parameter to newimages.php...

CVE-2007-4053

LinPHA vulnerability CVE-2007-4053 affects LinPHA 1.3.1 and earlier. The issue is an SQL injection in include/img_view.class.php (new_images.php, parameter order) due to unsanitized input used in setSql, enabling remote attackers to manipulate queries and potentially disclose or modify data. Repo...

LinPHA include/img_view.class.php order parameter SQL Injection

The remote host is running LinPHA, a web photo gallery application written in PHP. The version of LinPHA installed on the remote host fails to sanitize input to the 'order' parameter of the 'newimages.php' script before using it in the 'setSql' function in 'include/imgview.class.php' in a databas...

LinPHA <= 1.3.1 (new_images.php) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== LinPHA order = $REQUEST'order'; 188. 189. if$defaultorder != $REQUEST'order' 190. 191. $this-linkaddress .= '&order='.$REQUEST'order'; 192. 193. 194. else 195. 196...

LinPHA 1.3.1 - 'new_images.php' Blind SQL Injection

order = $REQUEST'order'; 188. 189. if$defaultorder != $REQUEST'order' 190. 191. $this-linkaddress .= '&order='.$REQUEST'order'; 192. 193. 194. else 195. 196. $this-order = $defaultorder; 197. 198. 199. 200. // 201. // set sql query string 202. // 203. function setSql$sqlbegin,$sqlwhere 204. 205...

LinPHA &lt;= 1.3.1 (new_images.php) Remote Blind SQL Injection Exploit

No description provided by source. ?php / LinPHA = 1.3.1 newimages.php Remote Blind SQL Injection Hash Fishing Exploit / BENCHMARK method author...: EgiX mail.....: n0b0d1esathotmaildotcom link.....: http://linpha.sourceforge.net/ dork.....: "LinPHA Version 1.3.x" or "The LinPHA developers"...