exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Steven Roddis

phpBB AJAX Chat/Shoutbox Cross Site Request Forgery

Posted Jul 25, 2011

Authored by Steven Roddis

The AJAX Chat/Shoutbox module in phpBB suffers from a cross site request forgery vulnerability.

tags | advisory, csrf

SHA-256 | 177fc6233cf9c093a8506ad4594022e02d79d4edac20c5789a3406d47894ab7f

Download | Favorite | View

TorrentFluxstartpop.txt

Posted Oct 20, 2006

Authored by Steven Roddis | Site stevenroddis.com.au

Input passed to the "torrent" field of a GET Request is not properly sanitized before being used. This can be exploited to insert arbitrary HTML and script code, which will be executed in an users browser session in context of an affected site if a user clicks on a malicious link.

tags | advisory, arbitrary

SHA-256 | 6a6b34ce2afcfa0432decb731a485ffde68dda4a0bce0e1f03541dbea8424bcd

Download | Favorite | View

torrentfluxXSS.txt

Posted Oct 12, 2006

Authored by Steven Roddis | Site stevenroddis.com.au

Torrentflux version 2.1 suffers from a cross site scripting condition using the User-Agent as an attack vector.

tags | advisory, xss

SHA-256 | 0f07a88c880c17dce4534f254853cd0093f594d4d3c8c9cae9c901af8406bba9

Download | Favorite | View