WebLeague version 2.2.0 suffers from a remote SQL injection vulnerability in profile.php.
31375ea467033249c5fefe4dcfc75e0793b59e42aba3f44914bbbb9f5d6ebb4b
phpYabs version 0.1.2 suffers from a remote file inclusion vulnerability.
2f3f0d369d804ebd7eac71f460b568e4e47337083033efb7b8b2a65d8846526c