Recent changes to bugs

php structure

Michael Gefen — Thu, 03 Jul 2008 16:14:40 -0000

i tried to install this software, and it didnt work.
i resolved the issue bu changing the first line of the code in every file:

from:
<?

to:
<?php

it seems to apache or php version specific (i'm not an expert on this but the solution i offered worked)

Exploit

Anonymous — Thu, 12 Jun 2008 15:37:07 -0000

Found on SecurityReason, credits to them:

=========================================================
PHPInv 0.8.0 (LFI/XSS) Multiple Remote Vulnerabilities
=========================================================

,--^----------,--------,-----,-------^--,
| ||||||||| `--------' | O .. CWH Underground Hacking
Team ..
`+---------------------------^----------|
`\_,-------, _________________________|
/ XXXXXX /`| /
/ XXXXXX / `\ /
/ XXXXXX /\______(
/ XXXXXX /
/ XXXXXX /
(________(
`------'

AUTHOR : CWH Underground
DATE : 8 June 2008
SITE : www.citec.us

#####################################################
APPLICATION : PHPInv
VERSION : 0.8.0
DOWNLOAD : http://sourceforge.net/projects/phpinv
#####################################################

---LFI---

##############################################
Vulnerable: entry.php (?action=)

43: if (isset($action) & !isset($noconfirm)) {
44: include("inc/entry_$action.php");
45: }

###############################################

PHP Fatal error: Cannot access empty property

Anonymous — Tue, 28 Feb 2006 00:07:00 -0000

I found a bug, using PHP5 and APACHE 2, appears this
error:

PHP Fatal error: Cannot access empty property in
\inc\db_mysql.php on line 103 at the file

or in other versions doesnt appear nothing and only
works the first page but nothiing more.

this issue was solved, changing:

$this->free_result($this->$query_id);

for

$this->free_result($this->query_id);

on the file \inc\db_mysql.php

Thanks all.

Bye

PHP error on any page except main

Anonymous — Fri, 30 Dec 2005 17:36:58 -0000

I've freshly installed it as directed in the README,
and can get the main page fine (With the example data -
rooms, etc.).

However, whenever I try to go to *any* other page
(data, admin, help, anything) it gives me:

Fatal error: Cannot access empty property
in /var/www/phpinv/inc/db_mysql.php on line 103

Any ideas?

Thanks!

Cheers,
Michael

new Entry field order

Anonymous — Thu, 27 May 2004 06:14:13 -0000

Hey, I want to first thank you for this great app.
I noticed that the entry boxes for creating a new
entry are in reverse alphabetical order on the page.
This isnt good because I want to enter certain fields
before entering others. Is there a way to make them
list in the same order that they were created?
Iknow that the table page shows them correctly.
Thanks in advance.

search

Anonymous — Tue, 14 Oct 2003 10:15:19 -0000

The results are double.
And you can search with results if you are not login (
no guest active)

Sorting doesn't stick

Anonymous — Tue, 09 Sep 2003 14:02:57 -0000

When you sort by column then go to another page (in a
multi-page inventory), the new page won't be sorted as
it was before. It reverts back to the default order.

Adding columns to categories problem

Anonymous — Wed, 12 Jun 2002 19:11:22 -0000

Established a category with 5 columns.

Added an entry to that category.

Added 6 more columns to the category.

Tried to populate the new columns for the existing entry.
Reports success, but data is not in the MySQL database.

New entries to the category are capable of using all
columns and having the data stored.