boku Library Management System 1.0 - Blind Time-Based SQL Injection (Unauthenticated)
webapps php

boku GetSimple CMS Custom JS 0.1 - Cross-Site Request Forgery
webapps php

boku GetSimple CMS My SMTP Contact Plugin 1.1.2 - Persistent Cross-Site Scripting
webapps php

boku GetSimple CMS My SMTP Contact Plugin 1.1.1 - Cross-Site Request Forgery
webapps php

boku GetSimple CMS 3.3.16 - Persistent Cross-Site Scripting
webapps php CVE-2020-23839

boku House Rental 1.0 - 'keywords' SQL Injection
webapps php

boku CloudMe 1.11.2 - Buffer Overflow ROP (DEP_ASLR)
local windows

boku Tailor MS 1.0 - Reflected Cross-Site Scripting
webapps php CVE-2020-23835

boku BarracudaDrive v6.5 - Insecure Folder Permissions
local windows

boku Stock Management System 1.0 - Cross-Site Request Forgery (Change Username)
webapps php

boku GetSimple CMS Plugin Multi User 1.8.2 - Cross-Site Request Forgery (Add Admin)
webapps php

boku Warehouse Inventory System 1.0 - Cross-Site Request Forgery (Change Admin Password)
webapps php

boku Online Course Registration 1.0 - Unauthenticated Remote Code Execution
webapps php

boku LibreHealth 2.0.0 - Authenticated Remote Code Execution
webapps php

boku Bandwidth Monitor 3.9 - 'Svc10StrikeBandMontitor' Unquoted Service Path
local windows

boku 10-Strike Bandwidth Monitor 3.9 - Buffer Overflow (SEH) (ASLR + DEP Bypass)
local windows