Showing 1 - 7 of 7

Files from Phil Taylor

First Active	2011-03-28
Last Active	2012-09-06

Ektron CMS 8.5.0 File Upload / XXE Injection: Posted Sep 6, 2012; Authored by Phil Taylor | Site senseofsecurity.com.au; Ektron CMS version 8.5.0 suffers from unauthenticated file upload and XXE injection vulnerabilities.; tags | exploit, vulnerability, file upload, xxe; SHA-256 | aec2ac7f32fa1685fd5e487de3e2ea551d1c03b5a65c07c2695b12fd0654d18e; Download | Favorite | View

Elcom Community Manager 7.4.10 Shell Upload: Posted Aug 25, 2012; Authored by Phil Taylor | Site senseofsecurity.com.au; Elcom Community Manager versions 7.4.10 from Elcom CMS suffers from a remote shell upload vulnerability.; tags | exploit, remote, shell; SHA-256 | 401ff74fdfc536a8f3c29661cb406b10fe55203d159972a2634931d9a52b3349; Download | Favorite | View

QNAP Command Injection: Posted Jun 17, 2012; Authored by Phil Taylor, Nadeem Salim | Site senseofsecurity.com.au; QNAP Turbo NAS with firmware versions 3.6.1 Build 0302T and below suffer from a command injection vulnerability that allows for remote code execution.; tags | exploit, remote, code execution; SHA-256 | bcec74851c024f2e1466935f495fd1687810e39d50b44f12aa001bc14964e143; Download | Favorite | View

Symfony 2 Unauthenticated Information Disclosure: Posted Mar 5, 2012; Authored by Phil Taylor | Site senseofsecurity.com.au; The XMLEncoder component of Symfony version 2.0.x fails to disable external entities when parsing XML. In the Symfony2 framework the XML class may be used to deserialize objects or as part of a client/server API. By using external entities it is possible to include arbitrary files from the file system. Any application written in Symfony2 that parses user supplied XML is affected.; tags | exploit, arbitrary; SHA-256 | 41c5e9ed24bcfedc86e11b0fbb5e857209c2e898342bd3b498a8707a5985fdad; Download | Favorite | View

WordPress BackWPup 2.1.4 Code Execution: Posted Oct 17, 2011; Authored by Phil Taylor | Site senseofsecurity.com.au; WordPress plugin BackWPup version 2.1.4 suffers from a remote code execution vulnerability.; tags | exploit, remote, code execution; SHA-256 | e8922fa4c7addf7e093d643ed4e3247a3aeeba16d61549f286d287b09cde8758; Download | Favorite | View

PHPCaptcha / Securimage Authentication Bypass: Posted May 20, 2011; Authored by Phil Taylor | Site senseofsecurity.com.au; PHPCaptcha / Securimage versions 1.0.4 through 2.0.2 suffer from an authentication bypass vulnerability. Proof of concept code included.; tags | exploit, proof of concept, bypass; systems | linux; SHA-256 | 241cf163dd08c5ba7d4da72cdecbbb268ce65adffc9dc6337e5656dedb08a513; Download | Favorite | View

WordPress BackWPup 1.6.1 Code Execution: Posted Mar 28, 2011; Authored by Phil Taylor | Site senseofsecurity.com.au; The WordPress BackWPup plugin version 1.6.1 suffers from a vulnerability that allows for local or remote code to be executed.; tags | exploit, remote, local; SHA-256 | 9d1296daa3ec8fb23564f12b35f8a9259718b647bc906c9344ec6687a2bdcfa6; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days