CVE-2008-6571: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.4 might allow remote attackers to inject arbitrary web script or HTML via 1 newimages.php, 2 login.php, and unspecified vectors...

LinPHA < 1.3.2 SQL Injection Vulnerability

Binary data 4150.prm...

CVE-2007-4053

SQL injection vulnerability in include/imgview.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the order parameter to newimages.php...

LinPHA include/img_view.class.php order parameter SQL Injection

The remote host is running LinPHA, a web photo gallery application written in PHP. The version of LinPHA installed on the remote host fails to sanitize input to the 'order' parameter of the 'newimages.php' script before using it in the 'setSql' function in 'include/imgview.class.php' in a databas...

CVE-2007-4053: Undefined Security Weakness

SQL injection vulnerability in include/imgview.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the order parameter to newimages.php...

LinPHA 1.3.1 - 'new_images.php' Blind SQL Injection

order = $REQUEST'order'; 188. 189. if$defaultorder != $REQUEST'order' 190. 191. $this-linkaddress .= '&order='.$REQUEST'order'; 192. 193. 194. else 195. 196. $this-order = $defaultorder; 197. 198. 199. 200. // 201. // set sql query string 202. // 203. function setSql$sqlbegin,$sqlwhere 204. 205...