Author: Curesec

Country:

Reported research: 22

Advisories

Risk
Topic & Details
Med.
HS-110 Smart Plug Account Takeover / Insecure Design
 Remote | 2016-11-30
Med.
MyBB 1.8.6 CSRF Weak Hashing, Plaintext Passwords
 Remote | 2016-09-16
Med.
MyBB 1.8.6 SQL Injection
 Remote | 2016-09-16
Low
MyBB 1.8.6 Improper validation of data passed to eval
 Remote | 2016-09-16
Low
Oxwall 1.8.0 (build 9900) XSS & Open Redirect
 Remote | 2016-09-16
High
XCart 5.2.6 Code Execution
 Remote | 2015-11-17
High
XCart 5.2.6 Shell Upload
 Remote | 2015-11-17
Low
XCart 5.2.6 Path Traversal
 Remote | 2015-11-17
Low
XCart 5.2.6 Cross Site Scripting
 Remote | 2015-11-17
Low
Sitemagic CMS 4.1 Cross Site Scripting
 Remote | 2015-11-17
Low
Thelia 2.2.1 Cross Site Scripting
 Remote | 2015-11-17
Med.
AlegroCart 1.2.8 SQL Injection
 Remote | 2015-11-16
High
AlegroCart 1.2.8 Local / Remote File Inclusion
 Local | 2015-11-16
High
dotclear 2.8.1 Shell Upload
 Remote | 2015-11-16
Low
LiteCart 1.3.2 Cross Site Scripting
 Remote | 2015-11-16
Low
dotclear 2.8.1 Cross Site Scripting
 Remote | 2015-11-16
Low
ClipperCMS 1.3.0 Cross Site Scripting
 Remote | 2015-11-16
Med.
ClipperCMS 1.3.0 Path Traversal
 Remote | 2015-11-16
Med.
ClipperCMS 1.3.0 Cross Site Request Forgery
 Remote | 2015-11-16
Med.
ClipperCMS 1.3.0 SQL Injection
 Remote | 2015-11-16
High
ClipperCMS 1.3.0 Shell Upload
 Remote | 2015-11-16
High
ClipperCMS 1.3.0 Code Execution
 Remote | 2015-11-16

Do you know.. we can display your:

- Twitter Link
- Website Link
- Zone-H Link
- Description of profile
- email (let us know if you want show public)

Let's us know! submit@cxsec.org

Copyright 2025, cxsecurity.com

 

Back to Top