papers

What this paper is This paper details a SQL injection vulnerability found in PhpMyLogon version 2. It demonstrates how an attacker can bypass authentication by manipulating the username input. The exploit leverages a com

What this paper is This paper details a Remote File Inclusion (RFI) vulnerability found in deV!L config.php config.php show $tmpdir $tmpdir dzcp1.5.2/inc/config.php require once($basePath."/inc/mysql.php"); config.php my

What this paper is This paper, published by loneferret in March 2010, describes two distinct Denial of Service (DoS) vulnerabilities in the httpdx web server version 1.5.3b. The vulnerabilities are triggered by sending m

What this paper is This paper details a SQL injection vulnerability found in the file of the "PHPpool media Domain Verkaufs und Auktions Portal" web application. The vulnerability allows an attacker to manipulate databas

What this paper is This paper is an advisory detailing a Local File Inclusion (LFI) vulnerability found in PHP-Nuke. It explains how an attacker can exploit this flaw to include and execute arbitrary local files on the w

What this paper is This paper details a vulnerability in RogioBiz PHP File Manager version 1.2 that allows an attacker to bypass the administrative login mechanism. The exploit leverages a specific input manipulation to