Pyro CMS 3.9 - Server-Side Template Injection (SSTI) (Authenticated)
Uvdesk v1.1.3 - File Upload Remote Code Execution (RCE) (Authenticated)