Test cases
Vulnerability test cases mapped to their corresponding CVE records, with technical context drawn from NVD, MITRE, and the original vendor advisories.
ICMP netmask request
Probe for ICMP type 17 (Address Mask Request) responses. Leaks subnet mask, supports network mapping.
ICMP timestamp request
Probe for ICMP type 13 (Timestamp Request) responses. Leaks system clock, supports time-skew and session-prediction analysis.
myBloggie 2.1.6 SQL injection
Unauthenticated SQL injection via user_id parameter on index.php; authenticated admin path via post_id on admin.php.
FaName 1.0 cross-site scripting
Three reflected XSS injection points across index.php and page.php. Cluster suggests no central output-encoding helper.
myBloggie 2.1.6 path disclosure
Three error paths leak PHP install path: calendar.php invalid year, common.php direct request, login.php mode-array.
FaName 1.0 path disclosure
Quote-semicolon in id parameter triggers DB error that echoes the install path. Chaining primitive for include attacks.
FaName 1.0 SQL injection
SQL injection via id parameter in class/page.php. May be the same root cause as CVE-2008-0328.
Firefox / Mozilla HTTP authentication focus
Background tab can pop an HTTP-auth dialog without raising focus. Phishing-relevant browser UI-trust issue.
Apache Tomcat directory traversal via mod_jk
URI normalization mismatch between Apache HTTPD (mod_jk/mod_proxy_ajp) and Tomcat permits path traversal beyond docroot.