r0t AWStats 6.4 - 'AWStats.pl' Multiple Full Path Disclosures
webapps cgi CVE-2006-3682;OSVDB-25205

MustLive WebGlimpse 2.18.7 - 'DOC' Directory Traversal
webapps cgi CVE-2009-5114;OSVDB-80332

Drosophila Malleo 1.2.3 - 'admin.php' Local File Inclusion
webapps php CVE-2009-1456;OSVDB-53802

HCOCA_MAN Hot Project 7.0 - Authentication Bypass
webapps php OSVDB-53882

Hussin X Online Email Manager - Insecure Cookie Handling
webapps php OSVDB-53806

Hussin X Esoftpro Online Guestbook Pro - 'display' Blind SQL Injection
webapps php CVE-2010-4996;CVE-2009-4935;OSVDB-66257

ahmadbady e-cart.biz Shopping Cart - Arbitrary File Upload
webapps php OSVDB-53803;CVE-2009-1447

YEnH4ckEr ClanTiger 1.1.1 - 'slug' Blind SQL Injection
webapps php OSVDB-55954

YEnH4ckEr ClanTiger 1.1.1 - Authentication Bypass
webapps php OSVDB-55956

YEnH4ckEr ClanTiger < 1.1.1 - Multiple Insecure Cookie Handling Vulnerabilities
webapps php OSVDB-55955

Alfons Luja Limbo CMS 1.0.4.2 - Cross-Site Request Forgery / Privilege Escalation
webapps php

Salvatore Fresta Tiny Blogr 1.0.0 rc4 - Authentication Bypass
webapps php OSVDB-53805;CVE-2009-1453

Ken Millar BlackBerry Enterprise Server 4.0/4.1 - MDS Connection Service Cross-Site Scripting
webapps java CVE-2009-0307;OSVDB-53772

Jeremi Gosney RazorCMS 0.3RC2 - Multiple Vulnerabilities
webapps php CVE-2009-1458;OSVDB-53776

Nine:Situations:Group::bookoo Geeklog 1.5.2 - 'usersettings.php' SQL Injection
webapps php

voodoo-labs Phorum 5.2 - 'versioncheck.php?upgrade_available' Cross-Site Scripting
webapps php OSVDB-54067