papers

What this paper is This paper describes a vulnerability in the Linux kernel, specifically affecting versions prior to 2.6.36-rc6. The vulnerability, identified as CVE-2010-3437, allows an unprivileged local user to discl

What this paper is This paper, published by SecPod Research in 2010, details a Persistent Cross-Site Scripting (XSS) vulnerability found in Micro CMS version 1.0 beta 1. It explains how an attacker can inject malicious s

What this paper is This paper is an advisory detailing a Cross-Site Request Forgery (CSRF) vulnerability found in Achievo version 1.4.3. It explains how an attacker could trick a logged-in user into performing destructiv

What this paper is This paper is an advisory detailing two authorization vulnerabilities found in Achievo version 1.4.3, a web-based project management and time tracking application. The vulnerabilities allow a remote, a

What this paper is This paper details a vulnerability in Aleza Portal version 1.6, a web application. The vulnerability allows an attacker to gain administrative access by manipulating the cookies used by the application

What this paper is This paper details a SQL injection vulnerability found in the e107 Website System, specifically version 0.7.23 and likely earlier versions. The vulnerability allows an attacker to manipulate database q