what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from T. Kerbl

sybase-bypass.pdf

Posted Aug 19, 2008

Authored by T. Kerbl | Site sec-consult.com

Whitepaper discussing Sybase SQL injection and bypassing mod_security. Written in German.

tags | paper, sql injection, bypass

SHA-256 | 09d84e0a64b65f88ddbf720c57c79803b8151b15d9d3ab11dbb2da236d85c7cc

Download | Favorite | View

SEC-20060613-0.txt

Posted Jun 15, 2006

Authored by D. Fabian, T. Kerbl | Site sec-consult.com

SEC-CONSULT Security Advisory 20060613-0 - Microsoft Outlook Web Access is vulnerable to an HTML code injection/cross site scripting attack. A malicious user could craft a mail containing HTML and Javascript code. Such code could be used to steal session information from the victims cookies, and thus enable the attacker to get access to the victim's emails. Vulnerable versions are Exchange 2000 (SP3), 2003 (SP1), 2003 (SP2).

tags | advisory, web, javascript, xss

SHA-256 | 660a8881d54862ec36db23fe8a4c02478e27719f256152894a6da754d91c8977

Download | Favorite | View