exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Matteo Carli

cpanel-xssxsrf.txt

Posted May 9, 2008

Authored by Matteo Carli | Site matteocarli.com

cPanel versions below 11.18.4 and 11.22.3 suffer from cross site scripting and cross site request forgery vulnerabilities.

tags | exploit, vulnerability, xss, csrf

advisories | CVE-2008-2070, CVE-2008-2071

SHA-256 | 1dd189e68d90bffd276d1e91cd22ddf00a141d88a385a1ee2bb8568ce473d976

Download | Favorite | View

statcounter-xss.txt

Posted Jul 24, 2007

Authored by Matteo Carli | Site matteocarli.com

StatCounter.com suffers from cross site scripting vulnerabilities due to completely trusting the user supplied HTTP referrer field.

tags | advisory, web, vulnerability, xss

SHA-256 | 3394d2dbe14ada999a5343d07b8897fbe5104c2d7b1622a072ab4742cda97ae4

Download | Favorite | View

wppersist-xss.txt

Posted Jun 20, 2007

Authored by Matteo Carli | Site matteocarli.com

A persistent cross site scripting vulnerability exists in the Wordpress.com dashboard.

tags | exploit, xss

SHA-256 | dfaba2f61102da0059c193b2576ec0cfd98b29788b91f7a724667e8fc3e02e19

Download | Favorite | View