Ihsan Sencan OOP CMS BLOG 1.0 - Cross-Site Request Forgery (Add Admin)
webapps php

Lucian Ioan Nitescu CMS Made Simple 2.2.7 - (Authenticated) Remote Code Execution
webapps php CVE-2018-10517

Ihsan Sencan Voovi Social Networking Script 1.0 - 'user' SQL Injection
webapps php 80

Jakub Palaczynski Royal TS/X - Information Disclosure
webapps json 54890 CVE-2018-18865

AkkuS PHP Proxy 3.0.3 - Local File Inclusion
webapps php 80 CVE-2018-19458

Ihsan Sencan Mongo Web Admin 6.0 - Information Disclosure
webapps php

Ihsan Sencan Poppy Web Interface Generator 0.8 - Arbitrary File Upload
webapps php

Ihsan Sencan WebVet 0.1a - 'id' SQL Injection
webapps php 80

Chris Lyne Advantech WebAccess SCADA 8.3.2 - Remote Code Execution
webapps asp CVE-2018-15707;CVE-2018-15705

Ihsan Sencan SiAdmin 1.1 - 'id' SQL Injection
webapps php 80

Ihsan Sencan Yot CMS 3.3.1 - 'aid' SQL Injection
webapps php 80

AkkuS qdPM 9.1 - 'filter_by' SQL Injection
webapps php 80

Ihsan Sencan Gate Pass Management System 2.1 - 'login' SQL Injection
webapps php 80

Procode701 Jelastic 5.4 - 'host' SQL Injection
webapps php 80

Ihsan Sencan Fantastic Blog CMS 1.0 - 'id' SQL Injection
webapps php 80

Pouya Darabi WordPress Plugin GoURL.io < 1.4.14 - File Upload
webapps php