Search:Author - Computer security: vulnerabilities and exploits database

[EN] securityvulns.ru
no-pyccku

See also
  Stefan Esser <s.esser_(at)_e-matters.de>
  Stefan Esser <sesser_(at)_php.net>
  Stefan Esser <stefan.esser_(at)_sektioneins.de>
Name: Stefan Esser
E-mail: sesser_(at)_hardened-php.net

Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability
Advisory 01/2007: WordPress CSRF Protection XSS Vulnerability
Advisory 02/2007: WordPress Trackback Charset Decoding SQL Injection Vulnerability
[Full-disclosure] Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability
[Full-disclosure] Advisory 13/2006: PHP HTML Entity Encoder Heap Overflow Vulnerability
Advisory 12/2006: phpMyAdmin - error.php XSS Vulnerability
[Full-disclosure] Advisory 12/2006: phpMyAdmin - error.php XSS Vulnerability
Advisory 11/2006: Serendipity Weblog XSS Vulnerabilities
[Full-disclosure] Advisory 10/2006: ViewVC Undefined Charset UTF-7 XSS Vulnerability
Advisory 09/2006: PHP unserialize() Array Creation Integer Overflow
Advisory 08/2006: PHP open_basedir Race Condition Vulnerability
[Full-disclosure] Advisory 07/2006: phpMyAdmin Multiple CSRF Vulnerabilities
[Full-disclosure] Advisory 06/2006: PHProjekt (Remote) Include Vulnerabilities
[Full-disclosure] PHP: Zend_Hash_Del_Key_Or_Index Vulnerability
[Full-disclosure] Advisory 04/2006: DokuWiki PHP code execution vulnerability in spellchecker
[Full-disclosure] Advisory 03/2006: KisMAC Cisco Vendor Tag Encapsulated SSID Overflow
Advisory 02/2006: PHP ext/mysqli Format String Vulnerability
Advisory 01/2006: PHP ext/session HTTP Response Splitting Vulnerability
Advisory 26/2005: TinyMCE Compressor Vulnerabilities
Advisory 25/2005: phpMyAdmin Variables Overwrite Vulnerability
Advisory 24/2005: libcurl URL parsing vulnerability
[Full-disclosure] Advisory 17/2005: phpBB Multiple Vulnerabilities
[Full-disclosure] Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str()
[Full-disclosure] Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo()
[Full-disclosure] Advisory 20/2005: PHP File-Upload $GLOBALS Overwrite Vulnerability
[Full-disclosure] Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability
Advisory 12/2005: UseBB Multiple Vulnerabilities
Advisory 10/2005: Yawp/YaWiki Remote URL Include Vulnerability
[Full-disclosure] Advisory 08/2005: PunBB SQL Injection Vulnerability
[Full-disclosure] Advisory 09/2005: PunBB arbitrary PHP code inclusion vulnerability
[Full-disclosure] Advisory 07/2005: Jaws Multiple Remote Code Execution Vulnerabilities
[Full-disclosure] Advisory 06/2005: Geeklog SQL Injection Vulnerability
[Full-disclosure] Advisory 04/2005: Cacti Remote Command Execution Vulnerability
[Full-disclosure] Advisory 03/2005: Cacti Multiple SQL Injection Vulnerabilities [FIXED]
[Full-disclosure] Advisory 05/2005: Cacti Authentification/Addslashes Bypass Vulnerability
[Full-disclosure] Advisory 01/2005: Fileupload/download vulnerability in Trac

test server