Related information

Web applications security vulnerabilities (PHP, ASP, CGI, Perl, etc)

Gallery 2.x Remote File Access Vulnerability

[KAPDA::#6] Punbb SQL Injection Vulnerability

RTasarim WebAdmin modul SQL injection

[SA17159] Xeobook Guestbook Script Insertion Vulnerability

From:	shieldmaiden333_(at)_aol.com <shieldmaiden333_(at)_aol.com>
Date:	16.10.2005
Subject:	[Full-disclosure] xss in php koala script v1.2

xss
/info.php?user=<xss>

and an upload vulnerability if you upload a file named file.gif.php
/upload/file.gif.php?cmd=ls

file.gif.php is attached