Deyaa Muhammad Zuz Music 2.1 - 'zuzconsole/___contact ' Persistent Cross-Site Scripting
webapps php 80

Deyaa Muhammad Listing Hub CMS 1.0 - 'pages.php id' SQL Injection
webapps php 80

Deyaa Muhammad Find a Place CMS Directory 1.5 - 'assets/external/data_2.php cate' SQL Injection
webapps php 80

GeekHack WordPress Plugin WooCommerce - GloBee (cryptocurrency) Payment Gateway 1.1.1 - Payment Bypass / Unauthorized Order Status Spoofing
webapps php 80 CVE-2018-20782

Mehmet EMIROGLU Webiness Inventory 2.3 - 'ProductModel' Arbitrary File Upload
webapps php 80 CVE-2019-8404

Mr Winst0n CMSsite 1.0 - 'post' SQL Injection
webapps php 80

Tm9jdGlz MISP 2.4.97 - SQL Command Execution via Command Injection in STIX Module
webapps php 80 CVE-2018-19908

Raffaele Sabato Master IP CAM 01 3.3.4.2103 - Remote Command Execution
webapps cgi 80 CVE-2019-8387

Mehmet EMIROGLU qdPM 9.1 - 'search[keywords]' Cross-Site Scripting
webapps php 80 CVE-2019-8390

Mehmet EMIROGLU qdPM 9.1 - 'type' Cross-Site Scripting
webapps php 80 CVE-2019-8391

Mohammad Danish UniSharp Laravel File Manager 2.0.0-alpha7 - Arbitrary File Upload
webapps php 80

Mehmet EMIROGLU qdPM 9.1 - 'search_by_extrafields[]' SQL Injection
webapps php 80

0xB9 MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / Cross-Site Request Forgery
webapps php 80 CVE-2018-14575

0xB9 MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / Cross-Site Request Forgery
webapps php 80 CVE-2018-14575

0xB9 LayerBB 1.1.2 - Cross-Site Request Forgery (Add Admin)
webapps php 80 CVE-2018-17996

B0UG WordPress Plugin Booking Calendar 8.4.3 - (Authenticated) SQL Injection
webapps php 80 CVE-2018-20556