Osirys simplePms CMS 0.1.4 - Local File Inclusion / Remote Command Execution
webapps php

Nine:Situations:Group GeoVision LiveX 8200 - ActiveX 'LIVEX_~1.OCX' File Corruption
remote windows OSVDB-52354;CVE-2009-0865

rAWjAW InselPhoto 1.1 - Cross-Site Scripting
webapps php

Shane Bester MySQL 6.0.9 - XPath Expression Remote Denial of Service
dos linux CVE-2009-0819;OSVDB-52453

Osirys CmsFaethon 2.2.0 - 'item' SQL Injection
webapps php CVE-2009-5094;OSVDB-75374

Osirys BlogWrite 0.91 - Remote File Disclosure / SQL Injection
webapps php OSVDB-51978

bd0rk ea-gBook 0.1 - Remote Command Execution / Remote File Inclusion
webapps php OSVDB-52044;CVE-2009-5095

nuclear ideacart 0.02 - Local File Inclusion / SQL Injection
webapps php OSVDB-52043;OSVDB-52042;CVE-2009-5089;CVE-2009-5088

Romario Poppler 0.10.3 - Denial of Service
dos linux CVE-2009-0756;OSVDB-51914;CVE-2009-0755

Aria-Security Team Baran CMS 1.0 - 'Arbitrary '.ASP' File Upload / File Disclosure / SQL Injection / Cross-Site Scripting / Cookie Manipulation
webapps asp

Muhacir Free Joke Script 1.0 - Authentication Bypass
webapps php OSVDB-55106;OSVDB-51919;OSVDB-51918

x0r PHP Krazy Image Host Script 1.01 - 'id' SQL Injection
webapps php OSVDB-51917

Osirys InselPhoto 1.1 - 'query' SQL Injection
webapps php

nuclear Den Dating 9.01 - 'txtlookgender' SQL Injection
webapps php OSVDB-51899

Osirys Bloggeruniverse 2.0 Beta - 'id' SQL Injection
webapps php CVE-2009-5090;OSVDB-75372

x0r Graugon Gallery 1.0 - Cross-Site Scripting / SQL Injection / Cookie Bypass
webapps php OSVDB-52047;OSVDB-52046