Security Research Articles

Published vulnerability reports and security research.

• reportPHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow2026-06-18
• reportPHP 8.5.7 `levenshtein()` signed-integer overflow2026-06-18
• reportPHP 8.5.7 `mb_substr()` 'SJIS-mac' size_t underflow2026-06-18
• reportPHP 8.5.7 `FILTER_SANITIZE_ENCODED` uninitialized read2026-06-18
• reportJoomla 1.5.x to 3.4.5 Object Injection Exploit2015-12-31
• reportKerio Control <= 8.3.1 Boolean-based Blind SQL Injection2014-07-01
• reportDokuWiki 2012/01/25 CSRF Add User2012-04-17
• reportRecordPress 0.3.1 Multiple Vulnerabilities2011-03-09
• reportRuubikCMS Version 1.0.3 Multiple Vulnerabilities2011-03-08
• reportLinksys Cisco WAG120N CSRF Vulnerability2011-02-26
• reportTesta OTMS Multiple SQL Injection Vulnerabilities2010-02-08
• reportNASA.gov Cross-Site Scripting Vulnerability2009-12-28
• reportiDefense COMRaider ActiveX Control Multiple Insecure Methods2009-07-17
• reportPHP-Fusion Mod vArcade 1.8 SQL Injection2009-01-08
• reportCPanel 11.x XSS and Local File Inclusion2008-10-31
• reportNooMS Cross-Site Scripting Vulnerability2008-09-16
• reportEasy Photo Gallery Multiple Vulnerabilities2008-09-12
• reportphsBlog 0.2 Bypass SQL Injection Filtering2008-09-11
• reportPhpWebGallery 1.3.4 XSS/LFI Multiple Vulnerabilities2008-09-11
• reportFlexCMS PreviousColorsString Cross-Site Scripting2008-08-18
• reportMambo 4.6.2 Cross-Site Scripting Vulnerabilities2008-08-18
• reportPluck 4.5.2 Multiple Cross-Site Scripting Vulnerabilities2008-08-05
• reportEasyDynamicPages SQL Injection and Cross-Site Scripting2008-07-22
• reportEasyE-Cards SQL Injection and Cross-Site Scripting2008-07-22
• reportEasyPublish SQL Injection and Cross-Site Scripting2008-07-22
• reportEasyBookMarker "rs" Cross-Site Scripting2008-07-22
• reportMaian Music Cross-Site Scripting and SQL Injection2008-05-09
• reportMaian Guestbook footer.php Cross-Site Scripting2008-05-09
• reportMaian Recipe Cross-Site Scripting Vulnerabilities2008-05-09
• reportMaian Uploader Multiple Cross-Site Scripting Vulnerabilities2008-05-09
• reportMaian Search Cross-Site Scripting and SQL Injection2008-05-09
• reportMaian Links Multiple Cross-Site Scripting Vulnerabilities2008-05-08
• reportMaian Support Multiple Cross-Site Scripting Vulnerabilities2008-05-08
• reportMaian Gallery Multiple Vulnerabilities2008-05-08
• reportMaian Greetings Multiple Vulnerabilities2008-05-08
• reportMaian Weblog Multiple Cross-Site Scripting Vulnerabilities2008-05-07
• reportZomplog Multiple Vulnerabilities2008-05-06
• reportLifeType 1.2.8 "newBlogUserName" Cross-Site Scripting2008-05-06
• reportLifeType 1.2.7 "searchTerms" Cross-Site Scripting2008-05-05
• reportMjguest "level" Cross-Site Scripting Vulnerability2008-05-02
• reportActualAnalyzer Lite 2.78 Local File Inclusion2008-05-01
• reportvlBook 1.21 XSS/LFI Multiple Remote Vulnerabilities2008-05-01
• reportminiBB `whatus` Cross-Site Scripting Vulnerability2008-04-29
• reportSiteman 2.x Code Execution / LFI / XSS Multiple Vulnerabilities2008-04-26
• reportFaScript FaPhoto v1 SQL Injection2008-04-01
• reportEasyNews 4.0tr SQL Injection / XSS / LFI2008-04-01
• reportSava's Place Guestbook index.php Local File Inclusion2008-04-01
• reportSava's Link Manager Two Vulnerabilities2008-04-01
• reportNeat Weblog 0.2 articleId Remote SQL Injection2008-03-31
• reportNeat Weblog 0.2 articleId Remote SQL Injection (Variant 2)2008-03-31
• reportMaian Cart Cross-Site Scripting Vulnerabilities2008-02-28
• reportnuBoard 0.5 threads.php ssid SQL Injection2008-02-14
• reportAffiliate Market 0.1 BETA XSS / SQL Injection2008-02-14
• reportA-Blog V.2 XSS / Remote SQL Injection2008-02-03
• reportLulieBlog 1.02 voircom.php id Remote SQL Injection2008-01-23
• reportFoojan WMS 1.0 index.php story Remote SQL Injection2008-01-23
• reportSiteman 1.1.9 Remote File Disclosure2008-01-23
• reportPHP-RESIDENCE 0.7.2 Search Remote SQL Injection2008-01-16
• reportFaScript FaPersianHack v1 show.php SQL Injection2008-01-15
• reportFaScript FaMp3 v1 show.php Remote SQL Injection2008-01-15
• reportFaScript FaPersian Petition show.php SQL Injection2008-01-15
• reportFaScript FaName v1 page.php Remote SQL Injection2008-01-15
• reportSoftbiz Freelancers Script v.1 Remote SQL Injection2007-11-25
• reportSoftbiz Recipes Portal Script Remote SQL Injection2007-11-11
• reportSoftbiz Banner Exchange Network Script 1.0 SQL Injection2007-11-11
• reportSoftbiz Ad Management Plus Script v.1 Remote SQL Injection2007-11-11
• reportSoftbiz Auctions Script product_desc.php Remote SQL Injection2007-11-11
• reportSoftbiz Link Directory Script Remote SQL Injection2007-11-11
• reportSoftbiz Jobs and Recruitment Remote SQL Injection2007-10-08
• reportSoftbiz Classifieds PLUS id Remote SQL Injection2007-09-26