papers

What this paper is This paper, published by 10n1z1d in August 2010, details two types of vulnerabilities found in Zomplog CMS version 3.9: Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS). It provides pro

What this paper is This paper, published in 2010 by AnTi SeCuRe, details two vulnerabilities found in a Guestbook Script written in PHP. The vulnerabilities are HTML Injection and Cross-Site Scripting (XSS). The author d

What this paper is This paper describes a Local File Inclusion (LFI) vulnerability in PHP-Fusion, a web content management system. The vulnerability allows an attacker to include arbitrary local files from the server by

What this paper is This paper is a Proof-of-Concept (PoC) exploit demonstrating multiple buffer overflow vulnerabilities in Computer Associates (CA) Advantage Ingres version 2.6. The author, fdiskyou, published this in 2

What this paper is This paper details a SQL Injection vulnerability found in the Sports Accelerator Suite 2.0, a Content Management System (CMS) built with PHP and MySQL. The vulnerability lies in how the application han

What this paper is This paper details two Cross-Site Request Forgery (CSRF) vulnerabilities found in Saurus CMS version 4.7.0. CSRF is a type of attack where a malicious website, email, attachment, or program causes a us