SQL injection vulnerability in index.php in Discloser 0.0.4 rc2 allows remote malicious users to execute arbitrary SQL commands via the more parameter.
bob jewell discloser 0.0.4