Peter Blue Virtual Airlines Manager 2.6.2 - Persistent Cross-Site Scripting
webapps php

ghost_fh pfSense 2.4.4-p3 - Cross-Site Request Forgery
webapps php CVE-2019-16667

Cr0wTom Socket.io-file 2.0.31 - Arbitrary File Upload
webapps multiple

bdrake Sickbeard 0.1 - Cross-Site Request Forgery (Disable Authentication)
webapps multiple

Carlos E. Vieira F5 Big-IP 13.1.3 Build 0.0.6 - Local File Inclusion
webapps hardware CVE-2020-5902

AppleBois Webtareas 2.1p - Arbitrary File Upload (Authenticated)
webapps php

SITE Team Bio Star 2.8.2 - Local File Inclusion
webapps multiple CVE-2020-15050

AppleBois PandoraFMS 7.0 NG 746 - Persistent Cross-Site Scripting
webapps php CVE-2020-11749

V1n1v131r4 Koken CMS 0.22.24 - Arbitrary File Upload (Authenticated)
webapps php

BKpatron elaniin CMS - Authentication Bypass
webapps php

boku Online Course Registration 1.0 - Unauthenticated Remote Code Execution
webapps php

boku LibreHealth 2.0.0 - Authenticated Remote Code Execution
webapps php

James Green Bludit 3.9.2 - Directory Traversal
webapps multiple CVE-2019-16113

Emre ÖVÜNÇ PandoraFMS NG747 7.0 - 'filename' Persistent Cross-Site Scripting
webapps php

KBA@SOGETI_ESEC WordPress Plugin Email Subscribers & Newsletters 4.2.2 - 'hash' SQL Injection (Unauthenticated)
webapps php CVE-2019-20361

KBA@SOGETI_ESEC WordPress Plugin Email Subscribers & Newsletters 4.2.2 - Unauthenticated File Download
webapps php CVE-2019-19985