what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 5 of 5

Files from Madelman

phpEventCalendar.txt

Posted Jan 27, 2005

Authored by Madelman

phpEventCalendar version 0.2 does not check title and event text when the data is inserted in the database, allowing for arbitrary HTML injection.

tags | exploit, arbitrary

SHA-256 | e8a699fef2e513e4378aa82199db727c3e572800b81722fc116d8c0e405fae00

Download | Favorite | View

MinisTraverse.txt

Posted Jan 16, 2005

Authored by Madelman

Minis 0.2.1 suffers from a directory traversal flaw that allows for viewing of files outside of the webroot. If the server does not have access to the file, it enters into a loop causing a denial of service.

tags | exploit, denial of service

SHA-256 | bc6ce20ca36bb68498535718c232cac09a37599b8dae319f5270eaad999cd7b2

Download | Favorite | View

phpGiftReq.txt

Posted Jan 16, 2005

Authored by Madelman

phpGiftReq 1.4.0 suffers from multiple SQL injection flaws that allow for manipulation of the database.

tags | exploit, sql injection

SHA-256 | ccab1b3b37dc00b2ce75e69c79399eccdef31a6d7916011f4463b9fbd94ccd62

Download | Favorite | View

sphpBlog037.txt

Posted Jan 11, 2005

Authored by Madelman

SPHPBlog 0.3.7c is susceptible to a directory traversal attack. Fixed in release 0.3.7r2.

tags | exploit

SHA-256 | e36068983fcd00d46f6dcd628206297051c8060e3793ed88228add5b177e6284

Download | Favorite | View

QWikiwiki.txt

Posted Jan 5, 2005

Authored by Madelman

QWikiwiki 1.4.1 is susceptible to a directory traversal vulnerability. Detailed exploitation provided.

tags | exploit

SHA-256 | f121585069294006535400bd7a8b1c2c83396b02c0c3208da56c9250f1e05e40

Download | Favorite | View