Murat DEMİRCİ WordPress Plugin Backup and Restore 1.0.3 - Arbitrary File Deletion
webapps php

Martin Cernac Froxlor 0.10.29.1 - SQL Injection (Authenticated)
webapps php CVE-2021-42325

Aryan Chehreghani Money Transfer Management System 1.0 - Authentication Bypass
webapps php

Amel BOUZIANE-LEBLOND Kmaleon 1.1.0.205 - 'tipocomb' SQL Injection (Authenticated)
webapps php

Sentinal920 Simple Client Management System 1.0 - 'multiple' Stored Cross-Site Scripting (XSS)
webapps php

Sentinal920 Simple Client Management System 1.0 - SQLi (Authentication Bypass)
webapps php

Vulnerability-Lab ImportExportTools NG 10.0.4 - HTML Injection
webapps multiple

Vulnerability-Lab Payment Terminal 3.1 - 'Multiple' Cross-Site Scripting (XSS)
webapps php

Brian Rodriguez 10-Strike Network Inventory Explorer Pro 9.31 - 'srvInventoryWebServer' Unquoted Service Path
local windows

Muhammad Zaki Sulistya Opencart 3 Extension TMD Vendor System - Blind SQL Injection
webapps php

Vulnerability-Lab Ultimate POS 4.4 - 'name' Cross-Site Scripting (XSS)
webapps php

Vulnerability-Lab Vanguard 2.1 - 'Search' Cross-Site Scripting (XSS)
webapps php

Vulnerability-Lab Isshue Shopping Cart 3.5 - 'Title' Cross Site Scripting (XSS)
webapps multiple

Vulnerability-Lab Mult-e-Cart Ultimate 2.4 - 'id' SQL Injection
webapps php

Vulnerability-Lab PHP Melody 3.0 - Persistent Cross-Site Scripting (XSS)
webapps php

Vulnerability-Lab PHP Melody 3.0 - 'vid' SQL Injection
webapps php