Archive | Security RSS feed for this section

Anatomy of a real life XSS vulnerability…

TweetRecently I got an email from Ivan Buetler of GESEC Team, reporting a security vulnerability in the latest stable version (1.4.25) of Coppermine Photo Gallery. The exploit was reported in the URI upload mechanism of Coppermine which allows the users to provide the URI of an image anywhere on the web to make it a [...]

Read full story · Comments { 1 }

Inspekt – put a firewall in your PHP applications

TweetEveryone knows that you should filter your inputs most of the good programmers do it but when you are working with a large team of programmers on an open source project things slip up, errors do creep in, at times like this you wish for a mechanism which would prevent your team from making such [...]

Read full story · Comments { 6 }