phpTrafficA 1.4.2 - pageid SQL Injection

phpTrafficA 1.4.2 - pageid SQL Injection Application: phpTrafficA load some file as /etc/passwd or /path/www/stats/Php/configsql.php ?lang= is also vulnerable to xss attacks, and as Hamid Ebadi has mention $lang is also vulnerable to directory transversal ===== 4Credits ===== laurent gaffie conta...