Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and previous versions allows remote code execution via unspecified vectors.
ipa appgoat