Adam Pointon

2 exploits Active since Nov 2005

CVE-2006-1960 EXPLOITDB text WORKING POC

Cisco Wireless LAN Solution Engine < 2.13 - Cross-Site Scripting via archiveApplyDisplay.jsp displayMsg Parameter

Cross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13 allows remote attackers to inject arbitrary web script or HTML, possibly via the displayMsg parameter to archiveApplyDisplay.jsp, aka bug ID CSCsc01095.

View Code

CVE-2005-3559 EXPLOITDB text WRITEUP

Asterisk 1.0.9-1.2.0-beta1 - Directory Traversal via vmail.cgi Folder Parameter

Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. (dot dot) in the folder parameter.

View Code