Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
From: Thomas Pollet (thomas.polletgmail.com)
Date: Tue Apr 15 2008 - 11:07:57 CDT
I was looking at the free version of gallarific, and I found some suspicious
code in the scopbin directory.
Attached is a file I found in the zip i downloaded, in case someone wants to
the package can be downloaded from
Also, the software contains several xss flaws:
1) When modifying a user his email address like
persistent xss wil occur when viewing gadmin/users.php or moderating the
comments in gadmin/comments.php
2) When adding a comment like "><script>alert(1)</script> , xss will occur
when moderating the comments
4) probably more bugs.
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/
- application/octet-stream attachment: 911006.php