Posts tagged "vulnerability"

• XSS and Open Redirect on Telegraph.co.uk Authentication pages

  11 August 2014 · security vulnerability

  I recently found a couple of security issues with the Telegraph.co.uk website. The site contained an Open redirect as well as an XSS vulnerability. These issues were in the authentication section of the website, https://auth.telegraph.co.uk/ . The flaws could provide an easy… more »

• SQL Injection security flaw in OpenEMR medical records system.

  12 June 2014 · security vulnerability

  I recently examined a popular open source medical records system named OpenEMR. A quick review of the app uncovered a SQL Injection vulnerability in the application, that would allow an attacker to execute their own SQL commands against the system. The attack is relatively… more »

• A security bug in SymphonyCMS ( Predictable Forgotten Password Token Generation )

  24 March 2014 · automation random security vulnerability

  (This issue is now raised in OSVDB.) On the 20th October 2013, The SymphonyCMS project released version 2.3.4 of their Content Management System. The release included a security fix for an issue I’d found in their software. The bug made it much easier for people to gain… more »