CVE-2007-4053

SQL injection vulnerability in include/imgview.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the order parameter to newimages.php...

CVE-2007-4053

LinPHA vulnerability CVE-2007-4053 affects LinPHA 1.3.1 and earlier. The issue is an SQL injection in include/img_view.class.php (new_images.php, parameter order) due to unsanitized input used in setSql, enabling remote attackers to manipulate queries and potentially disclose or modify data. Repo...

LinPHA include/img_view.class.php order parameter SQL Injection

The remote host is running LinPHA, a web photo gallery application written in PHP. The version of LinPHA installed on the remote host fails to sanitize input to the 'order' parameter of the 'newimages.php' script before using it in the 'setSql' function in 'include/imgview.class.php' in a databas...

CVE-2007-4053: Undefined Security Weakness

SQL injection vulnerability in include/imgview.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the order parameter to newimages.php...

LinPHA 1.3.1 - 'new_images.php' Blind SQL Injection

order = $REQUEST'order'; 188. 189. if$defaultorder != $REQUEST'order' 190. 191. $this-linkaddress .= '&order='.$REQUEST'order'; 192. 193. 194. else 195. 196. $this-order = $defaultorder; 197. 198. 199. 200. // 201. // set sql query string 202. // 203. function setSql$sqlbegin,$sqlwhere 204. 205...

LinPHA <= 1.3.1 (new_images.php) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== LinPHA order = $REQUEST'order'; 188. 189. if$defaultorder != $REQUEST'order' 190. 191. $this-linkaddress .= '&order='.$REQUEST'order'; 192. 193. 194. else 195. 196...

LinPHA &lt;= 1.3.1 (new_images.php) Remote Blind SQL Injection Exploit

No description provided by source. ?php / LinPHA = 1.3.1 newimages.php Remote Blind SQL Injection Hash Fishing Exploit / BENCHMARK method author...: EgiX mail.....: n0b0d1esathotmaildotcom link.....: http://linpha.sourceforge.net/ dork.....: "LinPHA Version 1.3.x" or "The LinPHA developers"...

LinPHA 1.3.1 - new_images.php Blind SQL Injection

LinPHA 1.3.1 - newimages.php Blind SQL Injection order = $REQUEST'order'; 188. 189. if$defaultorder != $REQUEST'order' 190. 191. $this-linkaddress .= '&order='.$REQUEST'order'; 192. 193. 194. else 195. 196. $this-order = $defaultorder; 197. 198. 199. 200. // 201. // set sql query string 202. //...

CVE-2006-1923

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 RSS/RSS.php and 2 possibly other vectors...

CVE-2006-1924

SQL injection vulnerability in functions/dbapi.php in LinPHA 1.1.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 RSS/RSS.php and 2 possibly other vectors...

Sql injection

SQL injection vulnerability in functions/dbapi.php in LinPHA 1.1.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2006-1924

SQL injection vulnerability in functions/dbapi.php in LinPHA 1.1.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2006-1924

CVE-2006-1924 concerns LinPHA 1.1.1 where SQL injection is possible through the functions/db_api.php component, allowing remote attackers to execute arbitrary SQL commands via unknown vectors. The record consistently states this vulnerability without detailing a fix in the provided documents; no ...

CVE-2006-1923

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 RSS/RSS.php and 2 possibly other vectors...

CVE-2006-1923

CVE-2006-1923 affects LinPHA prior to 1.1.1. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via RSS/RSS.php and possibly other vectors. The available documents do not provide explicit exploit details b...

CVE-2006-1923: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.1.1 allow remote attackers to inject arbitrary web script or HTML via 1 RSS/RSS.php and 2 possibly other vectors...

CVE-2006-1924: Undefined Security Weakness

SQL injection vulnerability in functions/dbapi.php in LinPHA 1.1.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2006-1848

Multiple cross-site scripting XSS vulnerabilities in statsview.php in LinPHA 1.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 datefrom, 2 dateto, and 3 date parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in statsview.php in LinPHA 1.1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 datefrom, 2 dateto, and 3 date parameter...