Akıner Kısa Online Job Portal 1.0 - 'userid' SQL Injection
webapps php

Noth DedeCMS v.5.8 - _keyword_ Cross-Site Scripting
webapps php CVE-2020-27533

Vyshnav nk CSE Bookstore 1.0 - 'quantity' Persistent Cross-site Scripting
webapps php

Nikhil Kumar Online Examination System 1.0 - 'name' Stored Cross Site Scripting
webapps php

Alper Basaran CSE Bookstore 1.0 - Authentication Bypass
webapps php

Matthew Aberegg Nagios XI 5.7.3 - 'mibs.php' Remote Command Injection (Authenticated)
webapps php CVE-2020-5791

Gurkirat Singh Sphider Search Engine 1.3.6 - 'word_upper_bound' RCE (Authenticated)
webapps php

Serkan Sancar Client Management System 1.0 - 'searchdata' SQL injection
webapps php

Gurkirat Singh Sentrifugo 3.2 - File Upload Restriction Bypass (Authenticated)
webapps php CVE-2019-15813

David Bimmel PDW File Browser 1.3 - 'new_filename' Cross-Site Scripting (XSS)
webapps php

Lyhin\'s Lab InoERP 0.7.2 - Remote Code Execution (Unauthenticated)
webapps php

Akıner Kısa Online Health Care System 1.0 - Multiple Cross Site Scripting (Stored)
webapps php

Gurkirat Singh CMS Made Simple 2.1.6 - 'cntnt01detailtemplate' Server-Side Template Injection
webapps php CVE-2017-16783

0blio_ TextPattern CMS 4.8.3 - Remote Code Execution (Authenticated)
webapps php

Mayank Deshmukh Bludit 3.9.2 - Auth Bruteforce Bypass
webapps php CVE-2019-17240

Jyotsna Adhana Gym Management System 1.0 - Stored Cross Site Scripting
webapps php