Quantcast
Channel: Files from Joe Pollock ≈ Packet Storm
Browsing all 5 articles
Browse latest View live

Online Market Place Site 1.0 SQL Injection

Online Market Place Site version 1.0 suffers from an unauthenticated blind SQL injection vulnerability allowing remote attackers to dump the SQL database via time-based SQL injection.

View Article



Online Market Place Site 1.0 Cross Site Scripting

Online Market Place Site version 1.0 suffers from a persistent cross site scripting vulnerability.

View Article

Revenue Collection System 1.0 SQL Injection / Remote Code Execution

Revenue Collection System version 1.0 suffers from an unauthenticated SQL injection vulnerability in step1.php that allows remote attackers to write a malicious PHP file to disk. The resulting file can...

View Article

Revenue Collection System 1.0 Cross Site Scripting / Authentication Bypass

Revenue Collection System version 1.0 suffers from a persistent cross site scripting vulnerability allowing an authenticated client user to add an administrative user account to the application then...

View Article

Patient Record Management System 1.0 Authentication Bypass

Patient Record Management System version 1.0 suffers from an authentication bypass vulnerability during account recovery.

View Article

Browsing all 5 articles
Browse latest View live




Latest Images