| CVE | Product | Type |
|---|---|---|
| | MediaWiki | Unauthenticated RCE |
| | GenieACS | Unauthenticated RCE |
| | Bugzilla | Authentication Mechanism Bypass |
| CVE-2014-7236 | TWiki | Unauthenticated RCE |
| | TWiki | Arbitrary File Upload (Windows) |
| CVE-2014-9057 | MovableType | Unauthenticated SQLI |
| | Magento | Unauthenticated SQLI |
| | Magento | Unauthenticated LFIs |
| | Magento | Unauthenticated RFI |
| | WordPress | Privilege Escalation |
| | WordPress | SQLI |
| | WordPress | Persistent XSS |
| | WordPress | Privilege Escalation |
| | Bugzilla | Authentication Mechanism Bypass |
| | Joomla | Unauthenticated SQLI (RCE) |
| | vBulletin | Unauthenticated RCE |
| | Magento | Unauthenticated RCE |
| Magento | Unauthenticated Re-Install |
|
| Magento | Account Hijacking |
|
| Moodle | Remote Code Execution |