OSVDB: Open Sourced Vulnerability Database

User Profile for sullo

General Information

Registered On:	2003-06-17
Company:	http://cirt.net/
Location:	Richmond, VA

User Role:	Moderator
User Score:	3124.35
30 day score:	0.00

Expertise:	Web &amp; unix testing, coding various things in various languages.
Shamless Plug:	Nikto!

Latest Activity

Latest Approved changes:

23120 - SSH Tectia Server SFTP Service Filename Logging Format String
23172 - WRQ Reflection Secure IT SFTP Service Filename Logging Format String
62926 - AdFreely common.inc.php LANG_CODE Parameter Traversal Local File Inclusion
3848 - phpWebSite modsecurity.php inc_prefix Parameter Remote File Inclusion
2116 - PKCS 1 Version 1.5 Session Key Retrieval (Bleichenbacher Attack)
3341 - Microsoft IIS Redirect Response XSS
23232 - SAP Business Connector chopSAPLog.dsp fullName Variable Arbitrary File Disclosure
23233 - SAP Business Connector adapter-index.dsp url Variable Arbitrary Site Redirect
23036 - DBMan Multiple Default Account
440 - KW Whois CGI whois Parameter Arbitrary Command Execution
44591 - WordPress wp-includes/theme.php get_category_template() Function cat Parameter Traversal Local File Inclusion
9058 - PCI Netsupport Manager GET Request Arbitrary File Access
40262 - Apache HTTP Server mod_status refresh XSS
39244 - mcstrans Compartment Range DoS
39242 - Cairo read_png PNG Image Size Overflow
9218 - OmniHTTPd redir.exe Sample Application XSS
9216 - OmniHTTPd test.php Sample Application XSS
9217 - OmniHTTPd test.shtml Sample Application XSS
5000 - OmniHTTPd HTTP Version Overflow DoS
1829 - OmniHTTPd Pro Long POST Request DoS
39140 - OmniHTTPd Encoded Space (%20) Request Script Source Code Disclosure

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.