Carlos Avila LibreHealth 2.0.0 - (Authenticated) Arbitrary File Actions
webapps php 80

AkkuS OpenBiz Cubi Lite 3.0.8 - 'username' SQL Injection
webapps php 80

Ihsan Sencan OOP CMS BLOG 1.0 - 'search' SQL Injection
webapps php 80

Loading Kura Kura Grocery crud 1.6.1 - 'search_field' SQL Injection
webapps php 80

Ihsan Sencan OOP CMS BLOG 1.0 - Cross-Site Request Forgery (Add Admin)
webapps php

Lucian Ioan Nitescu CMS Made Simple 2.2.7 - (Authenticated) Remote Code Execution
webapps php CVE-2018-10517

Ihsan Sencan Voovi Social Networking Script 1.0 - 'user' SQL Injection
webapps php 80

Jakub Palaczynski Royal TS/X - Information Disclosure
webapps json 54890 CVE-2018-18865

AkkuS PHP Proxy 3.0.3 - Local File Inclusion
webapps php 80 CVE-2018-19458

Ihsan Sencan Mongo Web Admin 6.0 - Information Disclosure
webapps php

Ihsan Sencan Poppy Web Interface Generator 0.8 - Arbitrary File Upload
webapps php

Ihsan Sencan WebVet 0.1a - 'id' SQL Injection
webapps php 80

Chris Lyne Advantech WebAccess SCADA 8.3.2 - Remote Code Execution
webapps asp CVE-2018-15707;CVE-2018-15705

Ihsan Sencan SiAdmin 1.1 - 'id' SQL Injection
webapps php 80

Ihsan Sencan Yot CMS 3.3.1 - 'aid' SQL Injection
webapps php 80

AkkuS qdPM 9.1 - 'filter_by' SQL Injection
webapps php 80