what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Chris Rahm

rnnguest12.txt

Posted Dec 1, 2003

Authored by Chris Rahm

The RNN Guestbook version 1.2 has multitudes of vulnerabilities. They range from allowing a remote attacker to execute commands to the ability to achieve full administrative access without authentication. Full descriptions and exploitation enclosed.

tags | exploit, remote, vulnerability

SHA-256 | bbc07675f04461c29b805cfaf9019fee859075f88d1bcbb7eef350c4e27c9d74

Download | Favorite | View

trackclick.txt

Posted Oct 14, 2003

Authored by Chris Rahm

The TRACKtheCLICK script is vulnerable to an injection attack due to the User-Agent and Referer variables not being filtered in click.cgi, allowing a malicious attacker to spoof incorrect information and when admin.cgi is opened, the injected code will be executed by the victim's browser.

tags | advisory, cgi, spoof

SHA-256 | 1aaaed1d3addfb60459fea9d4ac3a4bcb3f996fedc2ddabc1ff833147a5a8a84

Download | Favorite | View