Enes Özeser Student Management System 1.0 - SQLi Authentication Bypass
webapps php CVE-2020-23935

Gonzalo Villegas TestLink 1.19 - Arbitrary File Download (Unauthenticated)
webapps php

Y1LD1R1M LimeSurvey 5.2.4 - Remote Code Execution (RCE) (Authenticated)
webapps php

0z09e Chikitsa Patient Management System 2.0.2 - 'backup' Remote Code Execution (RCE) (Authenticated)
webapps php

0z09e Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)
webapps php

Deha Berkin Bir Croogo 3.0.2 - Remote Code Execution (Authenticated)
webapps php CVE-2021-44673

Uriel Yochpaz WordPress Plugin DZS Zoomsounds 6.45 - Arbitrary File Read (Unauthenticated)
webapps php CVE-2021-39316

Abdurrahman Erkan WordPress Plugin Slider by Soliloquy 2.6.2 - 'title' Stored Cross Site Scripting (XSS) (Authenticated)
webapps php

Mohamed Magdy Abumusilm WordPress Plugin All-in-One Video Gallery plugin 2.4.9 - Local File Inclusion (LFI)
webapps php

Mohamed habib Smidi Online Magazine Management System 1.0 - SQLi Authentication Bypass
webapps php CVE-2021-44653

Mohamed habib Smidi Online Pre-owned/Used Car Showroom Management System 1.0 - SQLi Authentication Bypass
webapps php CVE-2021-44655

Tushar Jadhav Online Enrollment Management System in PHP and PayPal 1.0 - 'U_NAME' Stored Cross-Site Scripting
webapps php CVE-2021-40577

Pablo Santiago Laundry Booking Management System 1.0 - Remote Code Execution (RCE)
webapps php

Hubert Wojciechowski opencart 3.0.3.8 - Sessjion Injection
webapps php

Hubert Wojciechowski orangescrum 1.8.0 - 'Multiple' Cross-Site Scripting (XSS) (Authenticated)
webapps multiple

Hubert Wojciechowski orangescrum 1.8.0 - 'Multiple' SQL Injection (Authenticated)
webapps multiple