papers

What this paper is This paper, published in 2010 by Stephan Sattler, details two vulnerabilities found in Aprox CMS Engine version 6.0. The vulnerabilities are: SQL Injection: A flaw in the login process that allows an a

What this paper is This paper describes a security vulnerability in the MCFileManager plugin for TinyMCE, specifically version 2.1.2. The vulnerability allows an attacker to upload arbitrary files to the web server, whic

What this paper is This paper details a Denial of Service (DoS) vulnerability in Hanso Player version 1.3.0. The vulnerability is triggered by opening a specially crafted file. When the player attempts to process this ma

What this paper is This paper, published in 2010 by KnocKout, details multiple vulnerabilities found in the TradeMC E-Ticaret web application. Specifically, it demonstrates how to exploit Cross-Site Scripting (XSS) and S

What this paper is This paper details a vulnerability found in SmarterMail version 7.x (specifically build 7.2.3925). The author, David Hoyt (sqlhacker), discovered two related vulnerabilities: LDAP Injection: This allow

What this paper is This paper describes a vulnerability in older versions of FileApp (prior to version 2.0) on iOS devices. Specifically, it details how an attacker can remotely trigger a Denial of Service (DoS) conditio