papers

What this paper is This paper is an advisory detailing a Cross-Site Scripting (XSS) vulnerability found in Guestbook PHP version 1.2.8 by G5 Scripts. It explains how an attacker can inject malicious HTML or JavaScript co

What this paper is This paper is an advisory detailing two Cross-Site Scripting (XSS) vulnerabilities found in Sethi Family Guestbook version 3.1.8. It was published by Valentin Hoebel on April 24, 2010. The vulnerabilit

What this paper is This paper details a SQL injection vulnerability found in AlstraSoft AskMe Pro version 2.1. The vulnerability allows an attacker to inject malicious SQL code into the parameter of the script. By exploi

What this paper is This paper details a SQL injection vulnerability found in WHMCS (WHMCompleteSolution), a web application used for client management and billing. The exploit allows an attacker to extract sensitive info

What this paper is This paper, published by Sid3^effects on April 24, 2010, details two security vulnerabilities found in the NCT Jobs Portal Script. These vulnerabilities are: Authentication Bypass: An attacker can gain

What this paper is This paper details a Local File Inclusion (LFI) and Remote File Inclusion (RFI) vulnerability in Madirish Webmail version 2.01. The vulnerability stems from how the application handles a parameter name