CVE-2011-3753: Exposure of Sensitive Information to an Unauthorized Actor

LinPHA 1.3.4 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by viewer.php and certain other files...

CVE-2008-7223: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, or 5 plugins/stats/statsview.php...

PHP Krazy Image Host Script 1.01 SQL Injection

0x01 Informations: Name : PHP Krazy Image Host Script 1.01 Download : http://www.hotscripts.com/listings/jump/download/66961/ Vulnerability : Sql Injection Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/viewer.php Code $id = $GET'id';...

PHP Krazy Image Host Script 1.01 - id SQL Injection

PHP Krazy Image Host Script 1.01 - id SQL Injection 0x01 Informations: Name : PHP Krazy Image Host Script 1.01 Download : http://www.hotscripts.com/listings/jump/download/66961/ Vulnerability : Sql Injection Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged...

PHP Krazy Image Host Script 1.01 - 'id' SQL Injection

0x01 Informations: Name : PHP Krazy Image Host Script 1.01 Download : http://www.hotscripts.com/listings/jump/download/66961/ Vulnerability : Sql Injection Author : x0r Contact : [email protected] Notes : Proud to be Italian 0x02 Bug: Bugged file is /path/viewer.php Code $id = $GET'id';...

PHP Krazy Image Host Script 1.01 (viewer.php id) SQL Injection Vuln

Exploit for unknown platform in category web applications =================================================================== PHP Krazy Image Host Script 1.01 viewer.php id SQL Injection Vuln =================================================================== 0x01 Informations: Name : PHP Krazy...

CVE-2008-1487: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via 1 ftp/index.php, 2 viewer.php, 3 functions/other.php, 4 include/leftmenu.class.php, and 5 plugins/stats/statsview.php...

New Vunerability

blueshoes-filemanager-4.6public $it : www.blueshoes.org Remote File Include Vulnerability APPpathcore Auth0r : xw0x c0ntact : xw0xatHotmaild0tcom wlc0m In x0|0x ======================================================= C0d : ===== ./file.php requireonce$APP'path''core'...