what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 8 of 8

Files from Fabian Fingerle

Nextcloud / Owncloud User Enumeration

Posted Jan 13, 2017

Authored by Fabian Fingerle

The password reset form in Nextcloud and Owncloud suffers from a user enumeration vulnerability.

tags | advisory

SHA-256 | da096e428809ed496cecdae0c5425aec544c24d1e1001bda302b6555825ea2ca

Download | Favorite | View

Enigma2 Webadmin Remote Code Execution

Posted Jan 10, 2017

Authored by Fabian Fingerle

An independent research uncovered a critical vulnerability in badly configured webadmin plugin of many thousand enigma2 boxes in the wild. This misconfiguration could be used by unauthenticated remote attackers to achieve remote arbitrary code execution in the context of root superuser. To exploit the vulnerability an attacker could target common ISP networks for dial-in users.

tags | advisory, remote, arbitrary, root, code execution

SHA-256 | dbc3dbad2dc6e079840c687794b1d6eb95d782672f94cfae413cfa9975e07365

Download | Favorite | View

cpcommerce-xss.txt

Posted Oct 20, 2008

Authored by Fabian Fingerle

cpCommerce suffers from a cross site scripting vulnerability in search.php.

tags | exploit, php, xss

advisories | CVE-2008-4121

SHA-256 | ef9b5836653513efb4328f89b13fbc77287f7433d230eaecebabf6eae85bc911

Download | Favorite | View

flatpress-xss.txt

Posted Sep 25, 2008

Authored by Fabian Fingerle

FlatPress versions 0.804 and below suffer from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

advisories | CVE-2008-4120

SHA-256 | 3fdea98d891ca192999c2f55a8bcb56e78c93105dbbf84ced955644449e6ccbc

Download | Favorite | View

fuzzylime302-xss.txt

Posted Sep 22, 2008

Authored by Fabian Fingerle

Fuzzylime Forum versions 3.02 and below suffer from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2008-3098

SHA-256 | 8dcceb0a8cf2f068589c86d3c897c9417cc678b578f6dcd3f659e2e21a1a7ae7

Download | Favorite | View

xrms-sqlxss.txt

Posted Sep 4, 2008

Authored by Fabian Fingerle

XRMS suffers from multiple cross site scripting and SQL injection vulnerabilities.

tags | exploit, vulnerability, xss, sql injection

advisories | CVE-2008-1129

SHA-256 | 0bdef0ca481ae19458dda409c2fc4ab97493d63d05ac6fccbf3c16f2f3b41027

Download | Favorite | View

vtigercrm-xss.txt

Posted Sep 3, 2008

Authored by Fabian Fingerle

vtigerCRM version 5.0.4 suffers from multiple cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss

advisories | CVE-2008-3101

SHA-256 | 7ca2233625fca621ba12f5103e00f5c186340f892a1101e6ccde9d46319553e8

Download | Favorite | View

owl-xss.txt

Posted Jul 29, 2008

Authored by Fabian Fingerle | Site fabian-fingerle.de

Owl versions 0.95 and below suffer from a cross site scripting vulnerability.

tags | exploit, xss

advisories | CVE-2008-3100

SHA-256 | 8b07aa92f2d568035fe89e06ee016bf59945b36fc617bdde35d89e10e009a0d1

Download | Favorite | View