Pablo Santiago Beehive Forum - Account Takeover
webapps php

Andrea Intilangelo PHProjekt PhpSimplyGest v1.3. - Stored Cross-Site Scripting (XSS)
webapps php CVE-2022-27308

cheshireca7 Navigate CMS 2.9.4 - Server-Side Request Forgery (SSRF) (Authenticated)
webapps php CVE-2022-28117

Sajibe Kanti Explore CMS 1.0 - SQL Injection
webapps php CVE-2022-27412

Altelus Anuko Time Tracker - SQLi (Authenticated)
webapps php CVE-2022-24707

Hubert Wojciechowski e107 CMS v3.2.1 - Multiple Vulnerabilities
webapps php

Tin Pham Cyclos 4.14.7 - 'groupId' DOM Based Cross-Site Scripting (XSS)
webapps multiple CVE-2021-31673

Tin Pham Cyclos 4.14.7 - DOM Based Cross-Site Scripting (XSS)
webapps multiple CVE-2021-31674

Dogukan Dincer CSZ CMS 1.3.0 - 'Multiple' Blind SQLi
webapps php

heinjame Bitrix24 - Remote Code Execution (RCE) (Authenticated)
webapps php

Aydin Naserifard Magento eCommerce CE v2.3.5-p2 - Blind SQLi
webapps php

Roel van Beurden WordPress Plugin Advanced Uploader 4.2 - Arbitrary File Upload (Authenticated)
webapps php CVE-2022-1103

Behrad Taher WebTareas 2.4 - Blind SQLi (Authenticated)
webapps php CVE-2021-43481

Eren Gozaydin Microfinance Management System 1.0 - 'customer_number' SQLi
webapps php

Ünsal Furkan Harani ImpressCMS v1.4.4 - Unrestricted File Upload
webapps php

Greenwolf GitLab 14.9 - Stored Cross-Site Scripting (XSS)
webapps ruby CVE-2022-1175