what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 18 of 18

Files from Omnipresent

MySQL: Secure Web Apps - SQL Injection Techniques

Posted Mar 9, 2009

Authored by Omnipresent

Whitepaper called MySQL: Secure Web Apps - SQL Injection Techniques.

tags | paper, web, sql injection

SHA-256 | 0930f3a77eb458da8c9b9a814769e7cd4e1235ac3871a8c0be819bd5167283ff

Download | Favorite | View

xchat-disclose.txt

Posted Mar 28, 2008

Authored by Omnipresent, Evilcry | Site evilcry.altervista.org

XChat version 2.8.4-1 suffers from a password disclosure vulnerability.

tags | advisory, info disclosure

SHA-256 | 03761d56dabf4d589196b54e429b5573f4c4e4b3945864e93bd1843f91fee6dd

Download | Favorite | View

eforum-xss.txt

Posted Mar 19, 2008

Authored by Omnipresent

eForum version 0.4 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | afa135572b9c94e85b00f680f3090f9760e6b23981278b16b9f2b5c5c2f299cd

Download | Favorite | View

lightblog-upload.txt

Posted Feb 1, 2008

Authored by Omnipresent

LightBlog version 9.5 suffers from a remote file upload vulnerability.

tags | exploit, remote, file upload

SHA-256 | 9d290fc5671ba5010bb3b57294afd72899f920b52a472e8c226106ec937b96f5

Download | Favorite | View

ftpadmin-multi.txt

Posted Nov 30, 2007

Authored by Omnipresent

FTP Admin version 0.1.0 suffers from bypass, local file inclusion, and cross site scripting vulnerabilities.

tags | exploit, local, vulnerability, xss, file inclusion

SHA-256 | 1859291e1795d3ac49baf5fb6e89514071d68e63fd16ad1c63999b6d2caab4aa

Download | Favorite | View

yabook-xss.txt

Posted Apr 25, 2007

Authored by Omnipresent

YA Book version 0.98-alpha suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 402b570826e1cdc2982bcf108c60b73131fe089afc7eb556a360aa1e0b86360c

Download | Favorite | View

turbulence-rfi.txt

Posted Apr 24, 2007

Authored by Omnipresent

turbulence core version 0.0.1 alpha suffers from remote file inclusion and local file inclusion vulnerabilities.

tags | exploit, remote, local, vulnerability, code execution, file inclusion

SHA-256 | e30c71c88effdaac4c0b9cd2265624e82a25c78401430fabf981e626fa2f6113

Download | Favorite | View

qdblog-lfisql.txt

Posted Apr 17, 2007

Authored by Omnipresent

QDBlog version 0.4 suffers from SQL injection and local file inclusion vulnerabilities.

tags | exploit, local, vulnerability, sql injection, file inclusion

SHA-256 | c78dc88b3206d4fb988353cddbcd15c9adece4747b1dd715bacb1798924847b7

Download | Favorite | View

plphp-multi.txt

Posted Apr 11, 2007

Authored by Omnipresent

pL-PHP beta version 0.9 suffers from SQL injection, administrative bypass, and local file inclusion vulnerabilities.

tags | exploit, local, php, vulnerability, sql injection, file inclusion

SHA-256 | 55781adadecc25967793eb70dfce2465b352aec8c5eb04c30ed289f92567a30e

Download | Favorite | View

grayscale-multi.txt

Posted Mar 14, 2007

Authored by Omnipresent

Grayscale Blog version 0.8.0 suffers from SQL injection, security bypass, and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, sql injection

SHA-256 | 645903ad556da0bc3a0748ca86238ce02c8e413ec53b4ddbd76691e38a5cdfce

Download | Favorite | View

sofgb10.txt

Posted Aug 27, 2006

Authored by Omnipresent | Site it.security.netsons.org

Simple one-file Guestbook versions 1.0 and below suffer from an administrative bypass flaw.

tags | advisory

SHA-256 | 03c48e5cf2943901784568167172e7b38a60b06ba29d03fb02f195cce05038d6

Download | Favorite | View

MicroGuestBook.txt

Posted Jul 24, 2006

Authored by Omnipresent | Site it.security.netsons.org

MicroGuestBook suffers from a cross site scripting flaw.

tags | advisory, xss

SHA-256 | 8ed0dca4560aa0bc7dd5e706737062f3c99e5799c368920947cb7273e945cc24

Download | Favorite | View

fan-Guestbookv2.0.1.txt

Posted Jul 18, 2006

Authored by Omnipresent | Site it.security.netsons.org

Fantastic GuestBook version 2.0.1 suffers from XSS due to improper input sanitization.

tags | advisory

SHA-256 | 7c86243db7e915d333495525d6984f897b4c10ccaa62dbac9813d3482e6686cf

Download | Favorite | View

vlBookXSS.txt

Posted Jun 27, 2006

Authored by Omnipresent

vlBook version 1.02 is susceptible to a cross site scripting flaw.

tags | exploit, xss

SHA-256 | b9e67425e6d0a14d0a086b1f5f9007251b1544af20d0fdedce59683c1aa662b6

Download | Favorite | View

CAForum1.0.txt

Posted Jun 3, 2006

Authored by Omnipresent

CAForum 1.0 suffers from a SQL injection vulnerability allowing anyone to log in as admin.

tags | advisory, sql injection

SHA-256 | e299bd93dcd999f3b4614efb95c9da7092ad71335bf46dddb6f6c268d08ab47d

Download | Favorite | View

CANews.txt

Posted May 23, 2006

Authored by Omnipresent

CodeAvalanche News version 1.2 is susceptible to SQL injection and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, sql injection

SHA-256 | 3d1489034a99d622b55fef374c33ff774077e39a220c3512261729e7a4dd0741

Download | Favorite | View

CuteGuestbook.txt

Posted May 6, 2006

Authored by Omnipresent

CuteGuestbook is susceptible to cross site scripting attacks.

tags | exploit, xss

SHA-256 | 02b73543425bd93a8ea0cef739a024abdf91289a44c374148431fbf3f71ed1b5

Download | Favorite | View

bloggage.txt

Posted Apr 28, 2006

Authored by Omnipresent | Site colander.altervista.org

bloggage suffers from a SQL injection vulnerability. POC included.

tags | advisory, sql injection

SHA-256 | 7a2ffb82807a4c80dfb88bf703c3f20e81c36ea5204da378e2d297a46d82a022

Download | Favorite | View