LinPHA < 1.3.2 SQL Injection Vulnerability

Binary data 4150.prm...

CVE-2007-4053

SQL injection vulnerability in include/imgview.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the order parameter to newimages.php...

LinPHA include/img_view.class.php order parameter SQL Injection

The remote host is running LinPHA, a web photo gallery application written in PHP. The version of LinPHA installed on the remote host fails to sanitize input to the 'order' parameter of the 'newimages.php' script before using it in the 'setSql' function in 'include/imgview.class.php' in a databas...

LinPHA 1.3.1 - &#039;new_images.php&#039; Blind SQL Injection

order = $REQUEST'order'; 188. 189. if$defaultorder != $REQUEST'order' 190. 191. $this-linkaddress .= '&order='.$REQUEST'order'; 192. 193. 194. else 195. 196. $this-order = $defaultorder; 197. 198. 199. 200. // 201. // set sql query string 202. // 203. function setSql$sqlbegin,$sqlwhere 204. 205...