IHTeam TerraMaster TOS 4.2.06 - RCE (Unauthenticated)
webapps linux

Vijay Sachdeva Faculty Evaluation System 1.0 - Stored XSS
webapps php

Vijay Sachdeva Artworks Gallery Management System 1.0 - 'id' SQL Injection
webapps php

AkkuS Webmin 1.962 - 'Package Updates' Escape Bypass RCE (Metasploit)
webapps linux CVE-2020-35606

SunCSR Team WordPress Plugin W3 Total Cache - Unauthenticated Arbitrary File Read (Metasploit)
webapps php

Kislay Kumar Multi Branch School Management System 3.5 - _Create Branch_ Stored XSS
webapps php

Kislay Kumar Library Management System 3.0 - _Add Category_ Stored XSS
webapps php

Musyoka Ian CSE Bookstore 1.0 - Multiple SQL Injection
webapps php

Matthew Aberegg Pandora FMS 7.0 NG 750 - 'Network Scan' SQL Injection (Authenticated)
webapps php

Mosaaed Victor CMS 1.0 - File Upload To RCE
webapps php

Raffaele Sabato Online Marriage Registration System 1.0 - 'searchdata' SQL Injection
webapps php CVE-2020-35151

Saeed Bala Ahmed Point of Sale System 1.0 - Multiple Stored XSS
webapps php

Marco Nappi Flexmonster Pivot Table & Charts 2.7.17 - 'Remote JSON' Reflected XSS
webapps multiple CVE-2020-20139

Marco Nappi Flexmonster Pivot Table & Charts 2.7.17 - 'To remote CSV' Reflected XSS
webapps multiple CVE-2020-20142

Marco Nappi Flexmonster Pivot Table & Charts 2.7.17 - 'To OLAP' Reflected XSS
webapps multiple CVE-2020-20141

Marco Nappi Flexmonster Pivot Table & Charts 2.7.17 - 'Remote Report' Reflected XSS
webapps multiple CVE-2020-20140