WangDudu Frog CMS 0.9.5 - Cross-Site Scripting
webapps php 80 CVE-2018-20448

Kaimi WordPress Plugin Adicon Server 1.2 - 'selectedPlace' SQL Injection
webapps php 80

Kaimi WordPress Plugin Baggage Freight Shipping Australia 0.1.0 - Arbitrary File Upload
webapps php 80

BouSalman bludit Pages Editor 3.0.0 - Arbitrary File Upload
webapps php 80 CVE-2018-1000811

Raif Berkay Dincel Craft CMS 3.0.25 - Cross-Site Scripting
webapps php 80 CVE-2018-20418

Sainadh Jamalpur FrontAccounting 2.4.5 - 'SubmitUser' SQL Injection
webapps php 80

linfeng WSTMart 2.0.8 - Cross-Site Scripting
webapps php 80

mqt ZeusCart 4.0 - Cross-Site Request Forgery (Deactivate Customer Accounts)
webapps php 80

Mickael BROUTY Yeswiki Cercopitheque - 'id' SQL Injection
webapps php 80 CVE-2018-13045

Raif Berkay Dincel Bolt CMS < 3.6.2 - Cross-Site Scripting
webapps php 80 CVE-2018-19933

Javier Olmedo Integria IMS 5.0.83 - Cross-Site Request Forgery
webapps php 80 CVE-2018-19829

Javier Olmedo Integria IMS 5.0.83 - 'search_string' Cross-Site Scripting
webapps php 80 CVE-2018-19828

Sainadh Jamalpur Hotel Booking Script 3.4 - Cross-Site Request Forgery (Change Admin Password)
webapps php 80

Rafael Pedrero MiniShare 1.4.1 - 'HEAD/POST' Remote Buffer Overflow
remote windows 80 CVE-2018-19862;CVE-2018-19861

VulnSpy ThinkPHP 5.0.23/5.1.31 - Remote Code Execution
webapps php 80

Kaimi WordPress Plugin AutoSuggest 0.24 - 'wpas_keys' SQL Injection
webapps php 80