papers

What this paper is This paper details a Cross-Site Scripting (XSS) vulnerability found in NinkoBB version 1.3RC5. XSS vulnerabilities allow an attacker to inject malicious scripts, typically JavaScript, into web pages vi

What this paper is This paper details a Cross-Site Request Forgery (CSRF) vulnerability found in Zomplog version 3.9. CSRF is a type of web security vulnerability that allows an attacker to trick a logged-in user's brows

What this paper is This paper details a critical security vulnerability found in BloofoxCMS version 0.3.5 and likely earlier. The vulnerability is a classic SQL Injection flaw within the registration plugin. It allows an

What this paper is This paper details a SQL Injection vulnerability found in the Energine CMS. Specifically, it highlights how an attacker can exploit the cookie value to manipulate database queries. The vulnerability al

What this paper is This paper details a low-risk information disclosure vulnerability found in BloofoxCMS version 0.3.5 and potentially earlier. The vulnerability allows an attacker to discover the database table prefix

What this paper is This paper details a vulnerability found in MyBB version 1.6. The vulnerability is a "Full Path Disclosure" (FPD). This means that a user can trick the web application into revealing the absolute file