List of vulnerabilities

  • SQL injection
  • SQL Injection (AS)
  • Cross Site Scripting
  • Code execution (Unix)
  • Code execution (Windows)
  • Code execution (AS)
  • Directory traversal (Windows)
  • Directory traversal (Unix)
  • Directory traversal (AS)
  • Script source code disclosure
  • Cross Frame Scripting
  • XPath injection
  • Full path disclosure
  • LDAP injection
  • Cookie manipulation
  • URL redirection
  • Application error message
  • Application error message (AS)
  • File inclusion
  • File inclusion (AS)
  • CRLF injection/HTTP response splitting
  • CRLF injection/HTTP response splitting (AS)
  • Email Injection (AS)
  • PHP code injection
  • PHP code injection (AS)
  • Remote XSL inclusion
  • Arbitrary file creation (AS)
  • Arbitrary file deletion (AS)
  • File tampering (AS)
  • PHP invalid data type error message
  • PHP unserialize() used on user input (AS)
  • PHP preg_replace used on user input (AS)
  • PHP curl_exec() url is controlled by user

    • Go Back