Mahendra Purbia EgavilanMedia PHPCRUD 1.0 - 'Full Name' Stored Cross Site Scripting
webapps php

Mahendra Purbia OpenCart 3.0.36 - ATO via Cross Site Request Forgery
webapps php

Mahendra Purbia OpenCart 3.0.3.6 - Cross Site Request Forgery
webapps php

Mahendra Fiyo CMS 2.0.1.8 - Multiple Vulnerabilities
webapps php 80 CVE-2014-9148;CVE-2014-9147;CVE-2014-9146;CVE-2014-9145;CVE-2014-1222;OSVDB-96311;OSVDB-120132;OSVDB-120131;OSVDB-120130;OSVDB-120129;OSVDB-120128;OSVDB-120127;OSVDB-120126;OSVDB-104392

Mahendra Webuzo 2.1.3 - Multiple Vulnerabilities
webapps php 80 CVE-2013-6043;OSVDB-99204;CVE-2013-6042;CVE-2013-6041;OSVDB-99203;OSVDB-99202

Mahendra Xibo 1.2.2/1.4.1 - 'index.php?p' Directory Traversal
webapps php OSVDB-92934;CVE-2013-5979