exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Mateusz Goik

Bugzilla Cross Site Request Forgery / Cross Site Scripting

Posted Oct 18, 2013

Authored by Frederic Buclin, Mateusz Goik, David Lawrence | Site bugzilla.org

Bugzilla Security Advisory - Multiple cross site scripting and cross site request forgery vulnerabilities have been discovered and addressed in various versions of Bugzilla.

tags | advisory, vulnerability, xss, csrf

advisories | CVE-2013-1733, CVE-2013-1734, CVE-2013-1742, CVE-2013-1743, CVE-2012-4189

SHA-256 | 943bffbd4c59491956254e396c5dddc10c25b0b775de07d14bd90dac0cbf7118

Download | Favorite | View

Bugzilla Information Leak / Cross Site Scripting

Posted Nov 15, 2012

Authored by Frederic Buclin, Mateusz Goik, Gervase Markham, David Lawrence | Site bugzilla.org

Bugzilla suffers from multiple information leak and cross site scripting vulnerabilities. Various versions ranging from 2.x through 4.x are affected.

tags | advisory, vulnerability, xss, info disclosure

advisories | CVE-2012-4199, CVE-2012-4198, CVE-2012-4189, CVE-2012-4197, CVE-2012-5475

SHA-256 | 21672967035df2502939f68c6fb93cd188b821430fff628d2e01c963fba9c035

Download | Favorite | View

Mathopd Directory Traversal

Posted Feb 6, 2012

Authored by Mateusz Goik

Mathopd versions 1.5p7 and below suffer from a directory traversal vulnerability.

tags | advisory, file inclusion

SHA-256 | b6966987c8121ec3ba1d4cee64e0611aa7630b447ac6b3b6a8d04a5616ccb7b8

Download | Favorite | View