Dolev Farhi Atlassian JIRA 8.11.1 - User Enumeration
webapps multiple CVE-2020-14181

Vadym Soroka GLPI 9.5.3 - 'fromtype' Unsafe Reflection
webapps php

Nicholas Ferreira Joomla JCK Editor 6.4.4 - 'parent' SQL Injection (2)
webapps php CVE-2018-17254

Christian Vierschilling Hotel and Lodge Management System 1.0 - Remote Code Execution (Unauthenticated)
webapps php

Lucas Souza Fluig 1.7.0 - Path Traversal
webapps multiple

Ricardo Ruiz Textpattern 4.8.3 - Remote code execution (Authenticated) (2)
webapps php

Deepak Kumar Bharti Web Based Quiz System 1.0 - 'eid' Union Based Sql Injection (Authenticated)
webapps php

Suraj Bhosale Online Ordering System 1.0 - Blind SQL Injection (Unauthenticated)
webapps php

Tushar Vaidya Textpattern CMS 4.9.0-dev - 'Excerpt' Persistent Cross-Site Scripting (XSS)
webapps php

Tushar Vaidya Textpattern CMS 4.8.4 - 'Comments' Persistent Cross-Site Scripting (XSS)
webapps php

Suraj Bhosale Online Ordering System 1.0 - Arbitrary File Upload
webapps php

Tadjmen e107 CMS 2.3.0 - CSRF
webapps php CVE-2021-27885

Tushar Vaidya Local Services Search Engine Management System (LSSMES) 1.0 - Blind & Error based SQL injection (Authenticated)
webapps php

Tushar Vaidya Local Services Search Engine Management System (LSSMES) 1.0 - 'name' Persistent Cross-Site Scripting (XSS)
webapps php

Mücahit Saratar Zen Cart 1.5.7b - Remote Code Execution (Authenticated)
webapps php CVE-2021-3291

P.Naveen Kumar Web Based Quiz System 1.0 - 'name' Persistent Cross-Site Scripting
webapps php