<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>hiredhacker.com &#187; advisory</title>
	<atom:link href="http://www.hiredhacker.com/tag/advisory/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.hiredhacker.com</link>
	<description>relevant ramblings of an ethical hacker</description>
	<lastBuildDate>Sat, 05 Jun 2010 17:36:30 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>StatPress/StatPress Reloaded &#8211; SQL Injections</title>
		<link>http://www.hiredhacker.com/2008/11/03/statpressstatpress-reloaded-sql-injections/</link>
		<comments>http://www.hiredhacker.com/2008/11/03/statpressstatpress-reloaded-sql-injections/#comments</comments>
		<pubDate>Mon, 03 Nov 2008 16:36:27 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[advisory]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[sql injection]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/?p=82</guid>
		<description><![CDATA[iriStatAppend() // URL (requested) $urlRequested = iri_StatPress_URL(); ... $referrer = (isset($_SERVER['HTTP_REFERER']) ? htmlentities($_SERVER['HTTP_REFERER']) : ''); ... $insert = "INSERT INTO " . $table_name . " (date, time, ip, urlrequested, agent, referrer, search,nation,os,browser,searchengine,spider,feed,user,timestamp) " . "VALUES ('$vdate','$vtime','$ipAddress','$urlRequested','" . addslashes(strip_tags($userAgent)) . "','$referrer','" . addslashes(strip_tags($search_phrase)) . "','" . iriDomain($ipAddress) . "','$os','$browser','$searchengine','$spider','$feed','$userdata->user_login','$timestamp')"; $results = $wpdb->query($insert); iri_StatPress_Vars() if (strpos(strtolower($body), "%thistotalvisits%") [...]]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2008/11/03/statpressstatpress-reloaded-sql-injections/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Mantis Bug Tracker XSS</title>
		<link>http://www.hiredhacker.com/2008/03/01/mantis-bug-tracker-xss/</link>
		<comments>http://www.hiredhacker.com/2008/03/01/mantis-bug-tracker-xss/#comments</comments>
		<pubDate>Sat, 01 Mar 2008 21:52:15 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[advisory]]></category>
		<category><![CDATA[xss]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/2008/03/01/mantis-bug-tracker-xss/</guid>
		<description><![CDATA[&#8216;Mantis is a free popular web-based bugtracking system&#8217; &#8211; http://www.mantisbt.org/ I didn&#8217;t audit this, I don&#8217;t want to audit this, I just found it while using Mantis. There may be more, but this is what I got: /view_filters_page.php?for_screen=1&#38;target_field=show_category[]%22;alert(1);x=%22]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2008/03/01/mantis-bug-tracker-xss/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>XSS in WP Contact Form III.</title>
		<link>http://www.hiredhacker.com/2008/02/02/xss-in-wp-contact-form-iii/</link>
		<comments>http://www.hiredhacker.com/2008/02/02/xss-in-wp-contact-form-iii/#comments</comments>
		<pubDate>Sat, 02 Feb 2008 17:46:20 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[advisory]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[wordpress]]></category>
		<category><![CDATA[xss]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/2008/02/02/xss-in-wp-contact-form-iii/</guid>
		<description><![CDATA[The WP Contact Form III 1.4.1 WordPress plugin by &#8216;KristinKWangen&#8217; is vulnerable to multiple cross site scripting attacks. Note to developers, this does not stop script injection attacks: From wp-contactform.php line 105: $_POST['wpcf_your_name'] = stripslashes(trim($_POST['wpcf_your_name'])); Also note that this is not a very good way to die: From buttonsnap.php line 28: $selection = isset($_POST['selection']) ? [...]]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2008/02/02/xss-in-wp-contact-form-iii/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>More Chrome Directory Traversing.</title>
		<link>http://www.hiredhacker.com/2008/01/31/more-chrome-directory-traversing/</link>
		<comments>http://www.hiredhacker.com/2008/01/31/more-chrome-directory-traversing/#comments</comments>
		<pubDate>Thu, 31 Jan 2008 05:25:57 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[advisory]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[firefox]]></category>
		<category><![CDATA[researching]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/2008/01/31/more-chrome-directory-traversing/</guid>
		<description><![CDATA[Mozilla marked Bug ID 413250 as &#8216;RESOLVED FIXED&#8217; on Tuesday. I got a chance to check out the fix today, and found that the fix is inadequate in stopping the attack. Here&#8217;s another demo that reads your session store, and like before, uses the Download Statusbar extension. steal_sessionstore2.html.]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2008/01/31/more-chrome-directory-traversing/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Firefox chrome: URL Handling Directory Traversal.</title>
		<link>http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/</link>
		<comments>http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/#comments</comments>
		<pubDate>Sat, 19 Jan 2008 08:35:24 +0000</pubDate>
		<dc:creator>Gerry Eisenhaur</dc:creator>
				<category><![CDATA[Content]]></category>
		<category><![CDATA[0day]]></category>
		<category><![CDATA[advisory]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[firefox]]></category>
		<category><![CDATA[researching]]></category>

		<guid isPermaLink="false">http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/</guid>
		<description><![CDATA[I spent some time tonight with scripting access to chrome files and found that Firefox doesn&#8217;t properly handle escaped characters. Its possible to load any javascript file on a victims machine. This attack is similar to previously disclosed vulnerabilities but is not constrained to basic Firefox files. To exploit this the victim needs to have [...]]]></description>
		<wfw:commentRss>http://www.hiredhacker.com/2008/01/19/firefox-chrome-url-handling-directory-traversal/feed/</wfw:commentRss>
		<slash:comments>46</slash:comments>
		</item>
	</channel>
</rss>
