mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.

IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/lang_model.php.

IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in application/models/article_model.php.

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost.

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /classes/master.php?f=delete_ Facility.

SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.