papers

What this paper is This paper details a vulnerability in the Dell IT Assistant ActiveX control, specifically the component. The vulnerability lies in the method, which allows an attacker to read arbitrary values from the

What this paper is This paper describes a Local File Inclusion (LFI) vulnerability in the "JE Story Submit" component for Joomla! versions 1.5.x. It provides a Perl script that exploits this vulnerability to read arbitra

What this paper is This paper details a SQL injection vulnerability found in vBulletin versions 4.0.x through 4.1.3. The vulnerability lies in how the parameter is handled when searching for social group messages. An att

What this paper is This paper describes a Cross-Site Request Forgery (CSRF) vulnerability in Mevin Basic PHP Events Lister version 2.03. The vulnerability allows an attacker to trick a logged-in administrator into perfor

What this paper is This paper details a Local File Inclusion (LFI) vulnerability found in the "Appointment Booking Pro" (com rsappt pro2) component for Joomla! versions prior to its patching. The vulnerability allows an

What this paper is This paper, published by Sense of Security in 2011, details a Stored Cross-Site Scripting (XSS) vulnerability found in Oracle Sun GlassFish Enterprise Server version 2.1.1. It also briefly mentions a R