papers

What this paper is This paper describes a Metasploit Framework module that exploits a local buffer overflow vulnerability in WM Downloader version 3.0.0.9. The vulnerability allows an attacker to execute arbitrary code b

What this paper is This paper details multiple vulnerabilities discovered in WebEssence version 1.0.2, a web application. The vulnerabilities include Cross-Site Scripting (XSS), Remote File Upload, and Remote Blind SQL I

What this paper is This paper, published by indoushka on April 25, 2010, details a vulnerability in PHP Classifieds version 6.09. The vulnerability allows an attacker to dump email addresses stored by the application. Th

What this paper is This paper describes a Cross-Site Request Forgery (CSRF) vulnerability in TR Forum version 1.5. The vulnerability allows an attacker to trick an authenticated administrator into creating a new administ

What this paper is This paper describes a security vulnerability found in a web application called "iNetScripts." Specifically, it details how an attacker can upload a malicious file, disguised as an image, to the server

What this paper is This paper details an arbitrary file upload vulnerability found in a web application called "Clipak." The vulnerability allows an attacker to upload and execute arbitrary files on the web server, poten