papers

What this paper is This paper, published by Shamus on October 5th, 2010, details two significant vulnerabilities found in Cag CMS version 0.2 Beta: Cross-Site Scripting (XSS) and Blind SQL Injection. It provides proof-of

What this paper is This paper details a Local File Inclusion (LFI) vulnerability in SPAW Editor version 2.0.8.1. LFI vulnerabilities allow an attacker to include and execute files from the web server's filesystem that th

What this paper is This paper describes a Local File Inclusion (LFI) vulnerability in the CuteNews web application. Specifically, it points out that the parameter in can be manipulated to include arbitrary local files fr

What this paper is This paper details a security vulnerability in Uebimiau Webmail versions 3.2.0 through 2.0. The vulnerability is a Local File Inclusion (LFI) flaw, meaning an attacker can trick the web application int

What this paper is This paper details a privilege escalation vulnerability in FreeBSD versions 7.0 through 7.2. It exploits a null pointer dereference within the (pseudo-filesystem) implementation. By triggering this vul

What this paper is This paper details a blind SQL injection vulnerability found in Aspect Ratio CMS, a web content management system. The vulnerability allows an attacker to infer information from the database by observi