Ron Jost OpenEMR 5.0.1.7 - 'fileName' Path Traversal (Authenticated)
webapps php CVE-2019-14530

Beren Kuday GÖRÜN Node.JS - 'node-serialize' Remote Code Execution (3)
webapps nodejs CVE-2017-5941

Piyush Patil ICE Hrm 29.0.0.OS - 'xml upload' Stored Cross-Site Scripting (XSS)
webapps php

Piyush Patil ICE Hrm 29.0.0.OS - 'Account Takeover' Cross-Site Request Forgery (CSRF)
webapps php

Tagoletta Online Shopping Portal 3.1 - Remote Code Execution (Unauthenticated)
webapps php

Ricardo Ruiz Zoho ManageEngine ServiceDesk Plus MSP 9.4 - User Enumeration
webapps java CVE-2021-31159

Ajaikumar Nadar Unified Office Total Connect Now 1.0 - 'data' SQL Injection
webapps php

ahmed CKEditor 3 - Server-Side Request Forgery (SSRF)
webapps php

nhattruong Teachers Record Management System 1.0 - 'email' Stored Cross-site Scripting (XSS)
webapps php

nhattruong Teachers Record Management System 1.0 - 'Multiple' SQL Injection (Authenticated)
webapps php

Ron Jost OpenEMR 5.0.1.3 - Authentication Bypass
webapps php CVE-2018-15152

Fatih İLGİN Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting
webapps php

BHAVESH KAUL Client Management System 1.1 - 'Search' SQL Injection
webapps tru64

BHAVESH KAUL Client Management System 1.1 - 'username' Stored Cross-Site Scripting (XSS)
webapps php

Ron Jost OpenEMR 5.0.1.3 - 'manage_site_files' Remote Code Execution (Authenticated)
webapps php CVE-2018-15139

Mert Daş TextPattern CMS 4.8.7 - Remote Command Execution (Authenticated)
webapps php