OSVDB: Open Sourced Vulnerability Database

User Profile for cji

General Information

Registered On:	2006-08-25
Personal Website:	http://attrition.org/~cji/
Location:	Boston

User Role:	Moderator
User Score:	784.38
30 day score:	0.00

InfoSec Experience:	I have been working professionally in information security since 2005, but interested in it for much longer.
Why Involved:	I appreciate the necessity of an independent and open organization keeping track of vulnerabilities outside of the corporate entities who use vulnerabilities as a way to sell products and services.
Interests:	Web application security, pentesting, log analysis, os x, ubuntu, gaming, hiking, reading, motorsports, zen, gadgets, movies
Shamless Plug:	http://attrition.org - Don't make us annoy you.

Latest Activity

Latest Approved changes:

71588 - WWWThreads showflat.pl view Parameter XSS
71590 - slickMsg views/Thread/display/top.php title Parameter XSS
71966 - SocialGrid Plugin for WordPress inline-admin.js.php default_services Parameter XSS
71568 - Alguest index.php start Parameter SQL Injection
71565 - Privileged Identity Management (PIM) Suite Password Vault Web Access Unspecified XSS
71881 - slickMsg Multiple BBCode Tags XSS
68874 - powermail Extension for TYPO3 Unspecified XSS
68877 - YUI build/swfstore/swfstore.swf Unspecified XSS
68876 - YUI build/uploader/assets/uploader.swf Unspecified XSS
68875 - YUI build/charts/assets/charts.swf Unspecified XSS
69203 - IBM WebSphere Portal SemanticTagService.js Unspecified Parameter XSS
68907 - HP Version Control Repository Manager Unspecified XSS
68906 - HP Operations Orchestration Unspecified XSS
69177 - HP Insight Control Performance Management Unspecified XSS
70328 - Openfire plugins/clientcontrol/create-bookmark.jsp Multiple Parameter XSS
70320 - Openfire user-roster-add.jsp Multiple Parameter XSS
70319 - Openfire user-create.jsp Multiple Parameter XSS
70323 - Openfire group-create.jsp Multiple Parameter XSS
66764 - PhotoMap Gallery Component for Joomla! index.php Multiple Parameter SQL Injection
66970 - Amblog Component for Joomla! index.php Multiple Parameter SQL Injection
66880 - TYPO3 Backend Unspecified Editing Forms SQL Injection
67043 - Hulihan Amethyst /admin/update_user/ Arbitrary User Manipulation CSRF
67045 - Hulihan Amethyst admin/update post[title] Parameter XSS
67044 - Hulihan Amethyst admin/update_settings site[setting_title] Parameter XSS
67042 - Hulihan Amethyst browse/create_comment comment[name] Parameter XSS
66760 - SPIP prive/informer_auteur_fonctions.php var_login Parameter XSS
66633 - SyndeoCMS starnet/index.php Multiple Parameter XSS
66510 - MyBB Advanced Stats on Index/Portal Plugin newthread.php subject Parameter XSS
66389 - Pligg search.php URI XSS
66290 - Mortgage and Amortization Calculator Script mortgage_amort.php Multiple Parameter XSS

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.