papers

What this paper is This paper, published in 2010 by nitr0us, details a directory traversal vulnerability found in version 2.11 of the Mongoose web server, specifically its Windows executable. Directory traversal (also kn

What this paper is This paper details a directory traversal vulnerability in Yaws version 1.89, a web server. The vulnerability allows an attacker to access files outside of the web server's intended document root by man

What this paper is This paper, published by TheLeader in 2010, details two security vulnerabilities found in XAMPP version 1.7.3 and earlier. XAMPP is a popular, free, and open-source cross-platform web server solution s

What this paper is This paper details a Remote Code Execution (RCE) vulnerability in Auto CMS version 1.8 and earlier. The exploit allows an attacker to execute arbitrary PHP code on the vulnerable web server by sending

What this paper is This paper presents a Proof of Concept (PoC) exploit for a directory traversal vulnerability found in Buffy FTP Server version 1.3. The vulnerability allows an unauthenticated or unprivileged attacker

What this paper is This paper details a SQL injection vulnerability found in the "Sponsor Wall" component (version 1.1) for Joomla!. The vulnerability allows an attacker to extract administrative login credentials (usern