Ihsan Sencan US Zip Codes Database - 'state' SQL Injection
webapps php CVE-2017-15980

Ihsan Sencan Newspaper 1.0 - SQL Injection
webapps php CVE-2017-15981

Ihsan Sencan News 1.0 - SQL Injection
webapps php CVE-2017-15982

Ihsan Sencan MyMagazine 1.0 - 'id' SQL Injection
webapps php CVE-2017-15983

Ihsan Sencan CmsLite 1.4 - 'S' SQL Injection
webapps php CVE-2017-15984

Ihsan Sencan Basic B2B Script - SQL Injection
webapps php CVE-2017-15985

Ihsan Sencan CPA Lead Reward Script - SQL Injection
webapps php CVE-2017-15986

Ihsan Sencan Fake Magazine Cover Script - SQL Injection
webapps php CVE-2017-15987

Ihsan Sencan Nice PHP FAQ Script - 'nice_theme' SQL Injection
webapps php CVE-2017-15988

Ihsan Sencan Online Exam Test Application - 'sort' SQL Injection
webapps php CVE-2017-15989

Ihsan Sencan Php Inventory - Arbitrary File Upload
webapps php CVE-2017-15990

Ihsan Sencan Vastal I-Tech Agent Zone - 'searchCommercial.php' / 'searchResidential.php' SQL Injection
webapps php CVE-2017-15991

Ihsan Sencan Website Broker Script - 'status_id' SQL Injection
webapps php CVE-2017-15992

Ihsan Sencan Zomato Clone Script - 'resid' SQL Injection
webapps php CVE-2017-15993

tomplixsee WordPress Plugin Ultimate Product Catalog 4.2.24 - PHP Object Injection
webapps php

bashis Uniview - Remote Command Execution / Export Config (PoC)
remote multiple