Ihsan Sencan Maian Uploader 4.0 - 'user' SQL Injection
webapps php

Sander Ferdinand GeoMoose < 2.9.2 - Directory Traversal
webapps php

rungga_reksya Pixie 1.0.4 - Arbitrary File Upload
webapps php CVE-2017-7402

trevor Hough Zyxel_ EMG2926 < V1.00(AAQT.4)b8 - OS Command Injection
webapps hardware CVE-2017-6884

Ihsan Sencan Membership Formula - 'order' SQL Injection
webapps php

hyp3rlinx Splunk Enterprise - Information Disclosure
webapps multiple CVE-2017-5607

Dany Bach EyesOfNetwork (EON) 5.1 - SQL Injection
webapps php

Ihsan Sencan Opensource Classified Ads Script - 'keyword' SQL Injection
webapps php

Tim Herres inoERP 0.6.1 - Cross-Site Scripting / Cross-Site Request Forgery / SQL Injection / Session Fixation
webapps php OVE-20170126-0002

Tim Herres inoERP 0.6.1 - Cross-Site Scripting / Cross-Site Request Forgery / SQL Injection / Session Fixation
webapps php OVE-20170126-0002

Tim Herres inoERP 0.6.1 - Cross-Site Scripting / Cross-Site Request Forgery / SQL Injection / Session Fixation
webapps php OVE-20170126-0002

Sysdream Nuxeo 6.0/7.1/7.2/7.3 - Remote Code Execution (Metasploit)
webapps jsp CVE-2017-5869

Sysdream EyesOfNetwork (EON) 5.0 - SQL Injection
webapps php CVE-2017-6088

Sysdream EyesOfNetwork (EON) 5.0 - Remote Code Execution
webapps php CVE-2017-6087

Ihsan Sencan CouponPHP CMS 3.1 - 'code' SQL Injection
webapps php

Ihsan Sencan Professional Bus Booking Script - 'hid_Busid' SQL Injection
webapps php