what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from Felix

xt:Commerce 3.x Second Order SQL Injection

Posted Feb 17, 2011

Authored by Felix

xt:Commerce 3 suffers from a second order SQL injection vulnerability that can be leveraged to reset passwords of arbitrary users and administrators.

tags | exploit, arbitrary, sql injection

SHA-256 | 9e3a37b7a87b6f0a5036cf569879b12c6788f73c69e4a9ca19a78276984e9a6f

Download | Favorite | View

CakePHP 1.3.5 / 1.2.8 Cache Corruption

Posted Nov 16, 2010

Authored by Felix

CakePHP versions 1.3.5 and below and 1.2.8 and below unserialize() cache corruption exploit.

tags | exploit

SHA-256 | 65a2b440d4696ecb893de017fe9da620c3ac3cbfb1083146551fa48a1d51dc2a

Download | Favorite | View