Sander Ferdinand Frappe Framework (ERPNext) 13.4.0 - Remote Code Execution (Authenticated)
webapps python

GatoGamer1155 Spring Cloud 3.2.2 - Remote Command Execution (RCE)
webapps java CVE-2022-22963

tmrswrr Netlify CMS 2.10.192 - Stored Cross-Site Scripting (XSS)
webapps java

Andrey Stoykov Faculty Evaluation System v1.0 - SQL Injection
webapps php

Okan Kurtulus Piwigo v13.7.0 - Stored Cross-Site Scripting (XSS) (Authenticated)
webapps php

Amirhossein Bahramizadeh Lost and Found Information System v1.0 - SQL Injection
webapps php CVE-2023-33592

Omer Shaik Gila CMS 1.10.9 - Remote Code Execution (RCE) (Authenticated)
webapps php

Fatih Nacar Beauty Salon Management System v1.0 - SQLi
webapps php

CraCkEr Car Rental Script 1.8 - Stored Cross-site scripting (XSS)
webapps php

Mirabbas Ağalarov WBCE CMS 1.6.1 - Open Redirect & CSRF
webapps php

Mirabbas Ağalarov PodcastGenerator 3.2.9 - Blind SSRF via XML Injection
webapps php

tmrswrr Alkacon OpenCMS 15.0 - Multiple Cross-Site Scripting (XSS)
webapps java

Mirabbas Ağalarov Prestashop 8.0.4 - Cross-Site Scripting (XSS)
webapps php

CraCkEr Vacation Rental 1.8 - Stored Cross-Site Scripting (XSS)
webapps php

matitanium WP AutoComplete 1.0.4 - Unauthenticated SQLi
webapps php CVE-2022-4297

CraCkEr GZ Forum Script 1.8 - Stored Cross-Site Scripting (XSS)
webapps php