accept no compromises

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 3 of 3

Files from Matteo Carli

cpanel-xssxsrf.txt

Posted May 9, 2008

Authored by Matteo Carli | Site matteocarli.com

cPanel versions below 11.18.4 and 11.22.3 suffer from cross site scripting and cross site request forgery vulnerabilities.

tags | exploit, vulnerability, xss, csrf

advisories | CVE-2008-2070, CVE-2008-2071

MD5 | 93fe9c2917908f3542033fd1c3bee6b3

Download | Favorite | Comments (0)

statcounter-xss.txt

Posted Jul 24, 2007

Authored by Matteo Carli | Site matteocarli.com

StatCounter.com suffers from cross site scripting vulnerabilities due to completely trusting the user supplied HTTP referrer field.

tags | advisory, web, vulnerability, xss

MD5 | cc29a79d825f6a82471c5aa4d477acc2

Download | Favorite | Comments (0)

wppersist-xss.txt

Posted Jun 20, 2007

Authored by Matteo Carli | Site matteocarli.com

A persistent cross site scripting vulnerability exists in the Wordpress.com dashboard.

tags | exploit, xss

MD5 | 4403e7380fb0ff7cb5d7aff368b5bdf4

Download | Favorite | Comments (0)