Mosaaed Car Rental Management System 1.0 - SQL Injection / Local File include
webapps php

Mosaaed Simple College Website 1.0 - 'page' Local File Inclusion
webapps php

Mufaddal Masalawala Anuko Time Tracker 1.19.23.5311 - Password Reset leading to Account Takeover
webapps php CVE-2020-27422

Mufaddal Masalawala Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality
webapps php CVE-2020-27423

Mufaddal Masalawala ChurchCRM 4.2.1 - Persistent Cross Site Scripting (XSS)
webapps multiple

Mufaddal Masalawala ChurchCRM 4.2.0 - CSV/Formula Injection
webapps multiple

Aakash Madaan WebDamn User Registration & Login System with User Panel - SQLi Auth Bypass
webapps multiple

Hardik Solanki DotCMS 20.11 - Stored Cross-Site Scripting
webapps multiple

Shahrukh Iqbal Mirza Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile
webapps multiple CVE-2020-28687

Shahrukh Iqbal Mirza Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Add Artwork
webapps multiple CVE-2020-28688

Anurag Kumar Employee Record Management System 1.1 - Login Bypass SQL Injection
webapps multiple

Hemant Patidar WonderCMS 3.1.3 - 'Menu' Persistent Cross-Site Scripting
webapps php CVE-2020-29469

Aditya Wakhlu Local Service Search Engine Management System 1.0 - SQLi Authentication Bypass
webapps multiple CVE-2021-3278

Parshwa Bhavsar Online News Portal System 1.0 - 'Title' Stored Cross Site Scripting
webapps multiple

Parshwa Bhavsar Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting
webapps multiple

Emre Aslan NewsLister - Authenticated Persistent Cross-Site Scripting
webapps multiple