LiquidWorm OpenBMCS 2.4 - Server Side Request Forgery (SSRF) (Unauthenticated)
webapps php

LiquidWorm OpenBMCS 2.4 - Create Admin / Remote Privilege Escalation
webapps php

LiquidWorm OpenBMCS 2.4 - SQLi (Authenticated)
webapps php

LiquidWorm OpenBMCS 2.4 - Cross Site Request Forgery (CSRF)
webapps php

Gaurav Grover Online Resort Management System 1.0 - SQLi (Authenticated)
webapps php

Aryan Chehreghani WordPress Core 5.8.2 - 'WP_Query' SQL Injection
webapps php CVE-2022-21661

Himash Online Diagnostic Lab Management System 1.0 - SQL Injection (Unauthenticated)
webapps php

Himash Online Diagnostic Lab Management System 1.0 - Stored Cross Site Scripting (XSS)
webapps php

Himash Online Diagnostic Lab Management System 1.0 - Account Takeover (Unauthenticated)
webapps php

Betul Denizler SalonERP 3.0.1 - 'sql' SQL Injection (Authenticated)
webapps php

Sant268 Hospitals Patient Records Management System 1.0 - 'doctors' Stored Cross Site Scripting (XSS)
webapps php

Sant268 Hospitals Patient Records Management System 1.0 - 'room_list' Stored Cross Site Scripting (XSS)
webapps php

Sant268 Hospitals Patient Records Management System 1.0 - 'room_types' Stored Cross Site Scripting (XSS)
webapps php

Veshraj Ghimire WordPress Plugin Frontend Uploader 1.3.2 - Stored Cross Site Scripting (XSS) (Unauthenticated)
webapps php CVE-2021-24563

Dominic Clark Open-AudIT Community 4.2.0 - Cross-Site Scripting (XSS) (Authenticated)
webapps php CVE-2021-44916

Zachary Asher Online Railway Reservation System 1.0 - 'Multiple' Stored Cross Site Scripting (XSS) (Unauthenticated)
webapps php