what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 6 of 6

Files from Dylan Irzi

WordPress WhyDoWork AdSense 1.2 XSS / CSRF

Posted Jul 29, 2014

Authored by Dylan Irzi

WordPress WhyDoWork AdSense plugin version 1.2 suffers from cross site request forgery and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, csrf

SHA-256 | af9bca3fe65b0a9bbf0292a7c524d2bc3961c3d5ba4dc081c13b25eb55493d3d

Download | Favorite | View

WordPress Wordfence 3.8.1 Cross Site Scripting

Posted Aug 28, 2013

Authored by Dylan Irzi

WordPress Wordfence plugin version 3.8.1 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 877036cb543d31efe9aeeced8a2497abf3c29130f3276a4cf110d0a249650272

Download | Favorite | View

WordPress Simple Login Registration 1.0.1 Cross Site Scripting

Posted Aug 26, 2013

Authored by Dylan Irzi

WordPress Simple Login Registration version 1.0.1 suffers from a cross site scripting vulnerability.

tags | exploit, xss

SHA-256 | 8eaaf8d9c59f71217d63637d3dbbbe789fbc7b92081e36db7effd8b1901a4a06

Download | Favorite | View

Hotel Software / Booking System 1.8 SQL Injection / XSS

Posted Aug 22, 2013

Authored by Dylan Irzi

Hotel Software and Booking System version 1.8 suffers from cross site scripting and remote SQL injection vulnerabilities. Note that this finding houses site-specific data.

tags | exploit, remote, vulnerability, xss, sql injection

SHA-256 | f83f1b9063455b40d77d39234f19b79380079cb3fdb6bc8d8c57bf0ed7fa815c

Download | Favorite | View

Quark Chat 1.0 XSS / SQL Injection / Path Disclosure

Posted Aug 15, 2013

Authored by Dylan Irzi

Quark Chat version 1.0 suffers from cross site scripting, path disclosure, and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection, info disclosure

SHA-256 | 929e0896aa251b1adeffa2a27dd9e8623dd08b30f77b7b4491b9812d99c37c56

Download | Favorite | View

Booking Calendar 4.1.4 Cross Site Request Forgery

Posted Aug 6, 2013

Authored by Dylan Irzi

Book Calendar WordPress plugin version 4.1.4 suffers from a cross site request forgery vulnerability.

tags | exploit, csrf

SHA-256 | 6d30a8638065d1685f1f8a6d384817e27bd1bc069b4525025f8cf060ba14c636

Download | Favorite | View