Security Research

This is a list of security advisories I've submitted to several entities. Please note that sadly Secunia is no longer providing direct links to their advisories so some of the links below will direct you to an archived page version.

• CVE-2017-16652: Symfony Open redirect vulnerability on security handlers

• CVE-2010-4827: Snitz Forums 2000 "M_NAME" Cross-Site Scripting and SQL Injection Vulnerabilities (original report here)

• CVE-2009-3533: Meeting Room Booking System SQL Injection Vulnerability (original report here)

• CVE-2007-1374: Snitz Forums 2000 "MSN" Script Insertion Vulnerability (original report here)

• CVE-2006-6088: i-Gallery Cross-Site Scripting and Information Disclosure Vulnerabilities (original report here)

• Snitz Forums 2000 "Email" SQL Injection Vulnerability

• Snitz Forums 2000 "X-Forwarded-For" SQL Injection Vulnerability

• Ragnarok Online Control Panel Authentication Bypass and SQL Injection

• XOOPS xNews Module Cross-Site Scripting Vulnerabilities

• XOOPS News Module Cross-Site Scripting Vulnerabilities

• Xoops Cross-Site Scripting and SQL Injection Vulnerabilities

• MyBB Avatar Change File Enumeration Security Issue

• phpGroupWare Multiple Vulnerabilities

• MaxDev MDPro MDForum Module "c" SQL Injection Vulnerability

• Advanced Electron Forum Security Issue and Two Vulnerabilities