Saud Alenazi Simple Student Quarterly Result/Grade System 1.0 - SQLi Authentication Bypass
webapps php

Saud Alenazi Multi-Vendor Online Groceries Management System 1.0 - 'id' Blind SQL Injection
webapps php

Luis Martínez Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)
webapps hardware

Saud Alenazi Home Owners Collection Management System 1.0 - 'id' Blind SQL Injection
webapps php

Saud Alenazi Home Owners Collection Management System 1.0 - Remote Code Execution (RCE) (Authenticated)
webapps php

Saud Alenazi Home Owners Collection Management System 1.0 - Account Takeover (Unauthenticated)
webapps php

Luca Cuzzolin AtomCMS v2.0 - SQLi
webapps php CVE-2022-24223

Ceylan BOZOĞULLARINDAN WordPress Plugin Learnpress 4.1.4.1 - Arbitrary Image Renaming
webapps php CVE-2022-0377

souzo PHP Unit 4.8.28 - Remote Code Execution (RCE) (Unauthenticated)
webapps php CVE-2017-9841

Ceylan BOZOĞULLARINDAN WordPress Plugin Domain Check 1.0.16 - Reflected Cross-Site Scripting (XSS) (Authenticated)
webapps php CVE-2021-24926

Ceylan BOZOĞULLARINDAN WordPress Plugin Mortgage Calculators WP 1.52 - Stored Cross-Site Scripting (XSS) (Authenticated)
webapps php CVE-2021-24904

Saud Alenazi Simple Chatbot Application 1.0 - 'message' Blind SQLi
webapps php

Saud Alenazi Simple Chatbot Application 1.0 - Remote Code Execution (RCE)
webapps php

Betul Denizler SalonERP 3.0.1 - 'sql' SQL Injection (Authenticated)
webapps php

Zachary Asher Online Railway Reservation System 1.0 - 'Multiple' Stored Cross Site Scripting (XSS) (Unauthenticated)
webapps php

Zachary Asher Online Railway Reservation System 1.0 - Admin Account Creation (Unauthenticated)
webapps php