https://www.bibsonomy.org/user/brightbyte/vulnerabilityBibSonomy RSS Feed for /user/brightbyte/vulnerabilityhttp://www.h-online.com/open/news/item/Critical-open-hole-in-PHP-creates-risks-1567532.htmlbrightbyte2012-05-03T22:05:04+02:00bug cgi php security vulnerability wtf <a itemprop="url" data-versiondate="2012-05-03T22:05:04+02:00" href="http://www.h-online.com/open/news/item/Critical-open-hole-in-PHP-creates-risks-1567532.html" rel="nofollow" class="description-link">http://www.h-online.com/open/news/item/Critical-open-hole-in-PHP-creates-risks-1567532.html</a>http://www.heise.de/security/meldung/PDF-Exploit-funktioniert-ohne-konkrete-Sicherheitsluecke-968031.htmlbrightbyte2010-04-01T11:30:19+02:00heise pdf security vulnerability wtf <a itemprop="url" data-versiondate="2010-04-01T11:30:19+02:00" href="http://www.heise.de/security/meldung/PDF-Exploit-funktioniert-ohne-konkrete-Sicherheitsluecke-968031.html" rel="nofollow" class="description-link">http://www.heise.de/security/meldung/PDF-Exploit-funktioniert-ohne-konkrete-Sicherheitsluecke-968031.html</a>If the attacker however tries the username ‘admin x’ the application will search for it in the database and will not find it, because it is impossible to find a username with a length of 17 in a database field that has a 16 character limit. The application will accept the new username and insert it into the database. However the username column is to short for the full name and therefore it is truncated and ‘admin ‘ is inserted into the database.http://www.suspekt.org/2008/08/18/mysql-and-sql-column-truncation-vulnerabilities/brightbyte2008-08-18T21:27:20+02:00mysql programmign security vulnerability webapp <span itemprop="description">If the attacker however tries the username ‘admin x’ the application will search for it in the database and will not find it, because it is impossible to find a username with a length of 17 in a database field that has a 16 character limit. The application will accept the new username and insert it into the database. However the username column is to short for the full name and therefore it is truncated and ‘admin ‘ is inserted into the database.</span>http://citp.princeton.edu/memory/brightbyte2008-05-25T21:27:27+02:00O.O cryptography hacks security vulnerability <a itemprop="url" data-versiondate="2008-05-25T21:27:27+02:00" href="http://citp.princeton.edu/memory/" rel="nofollow" class="description-link">http://citp.princeton.edu/memory/</a>