papers

What this paper is This paper details a vulnerability in the Joomla! component (Ulti RPX) version 2.1.0. The vulnerability is a Local File Inclusion (LFI) flaw, meaning an attacker can trick the web application into incl

What this paper is This paper details an exploit for Open & Compact FTPd version 1.2. It describes a pre-authentication buffer overflow vulnerability in the command of the FTP server. The exploit, written for the Metaspl

What this paper is This paper, published by ITSecTeam in March 2010, details two SQL injection vulnerabilities found in Phenix version 3.5b, a PHP web application. The vulnerabilities allow an attacker to manipulate data

What this paper is This paper describes a Local File Inclusion (LFI) vulnerability in the Ninja RSS Syndicator component, version 1.0.8, for Joomla. It provides a proof-of-concept exploit demonstrating how an attacker ca

What this paper is This paper is an advisory from ITSecTeam detailing a Blind SQL Injection vulnerability found in PHP Classifieds version 7.5. It explains how an attacker can exploit this vulnerability to extract inform

What this paper is This paper details a Local File Inclusion (LFI) vulnerability in the Joomla! component "GCalendar Suite" version 2.1.5. An attacker can exploit this vulnerability to read arbitrary files from the web s