| 2020-07-02 | E-learning PHP Script 0.1.0 SQL Injection | Published |
| 2020-06-16 | PHP-Fusion 9.03.60 PHP Object Injection / SQL Injection | Published |
| 2020-06-05 | NeonLMS - Learning Management System PHP Laravel Script - 'Arbitrary' File Download | Published |
| 2020-05-30 | NeonLMS - Learning Management System PHP Laravel Script - 'Messages' Persistent Cross Site | Published |
| 2020-05-28 | Kuicms PHP EE 2.0 Cross Site Scripting | Published |
| 2020-05-13 | Netsweeper WebAdmin unixlogin.php Python Code Injection | Published |
| 2020-05-05 | Johncaruso PHP Photo Gallery Remote File Inculsion Vulnerability [ RFI ] | Published |
| 2020-04-28 | PhpCollab 2.7.2 - Arbitrary File Upload | Published |
| 2020-04-28 | POS PHP 17.5 Cross Site Scripting | Published |
| 2020-04-27 | PhpCollab v2.7.2 - CSRF Arbitrary File Upload RCE PoC Script | Published |
| 2020-04-19 | Coins Clone - PHP Script SQL Injection | Published |
| 2020-04-07 | PlaySMS index.php Unauthenticated Template Injection Code Execution | Published |
| 2020-04-04 | SAUDI SOFTECH MST search.php Sql injection | Published |
| 2020-03-24 | Joomla com_hdwplayer 4.2 search.php SQL Injection | Published |
| 2020-03-23 | RConfig 3.9.4 search.crud.php Remote Command Injection | Published |
| 2020-03-16 | PHPKB Multi-Language 9 Authenticated Remote Code Execution | Published |
| 2020-03-16 | PHPKB Multi-Language 9 Authenticated Directory Traversal | Published |
| 2020-03-14 | PHP Scripts Mall website-seller Script 2.0.5 Reflected XSS. | Published |
| 2020-03-11 | PHPStudy Backdoor Remote Code execution Metasploit | Published |
| 2020-03-10 | PHPStudy Backdoor Remote Code Execution | Published |
| 2020-03-09 | 60CycleCMS news.php SQL Injection | Published |
| 2020-03-07 | PHP-FPM 7.x Remote Code Execution | Published |
| 2020-02-28 | PHP-Fusion CMS 9.03 Cross Site Scripting | Published |
| 2020-02-14 | PHP 7.0 < 7.4 Unix debug_backtrace disable_functions Bypass | Published |
| 2020-02-13 | SuiteCRM 7.11.11 Second-Order PHP Object Injection | Published |
| 2020-01-30 | PHP 7.0-7.4 disable_functions bypass PoC *nix only | Published |
| 2020-01-09 | Quickjob job board php script 1.0.0 - Persistent Cross-Site Scripting | Published |
| 2020-01-07 | Quickdate the ultimate php dating platform - XSS Persistence | Published |
| 2019-12-21 | WordPress Core < 5.3.x xmlrpc.php Denial of Service | Published |
| 2019-11-15 | FusionPBX Operator Panel exec.php Command Execution | Published |
| 2019-11-15 | FusionPBX Command exec.php Command Execution | Published |
| 2019-10-29 | Waldronmatt FullCalendar-BS4-PHP-MySQL-JSON 1.21 Cross Site Scripting | Published |