voodoo-labs Phorum 5.2 - '/admin/users.php' Multiple Cross-Site Scripting Vulnerabilities
webapps php OSVDB-54066

voodoo-labs Phorum 5.2 - '/admin/banlist.php?curr' Cross-Site Scripting
webapps php OSVDB-54065

voodoo-labs Phorum 5.2 - '/admin/badwords.php?curr' Cross-Site Scripting
webapps php OSVDB-54064

tmh chCounter 3.1.3 - Authentication Bypass
webapps php OSVDB-53916;CVE-2009-1362;CVE-2009-1347

JosS SMA-DB 0.3.13 - Multiple Remote File Inclusions
webapps php OSVDB-54139;CVE-2009-1452

ThE g0bL!N eLitius 1.0 - '/manage-admin.php' Arbitrary Add Admin/Change Password
webapps php OSVDB-53774

snakespc NetHoteles 3.0 - 'ficha.php' SQL Injection
webapps php OSVDB-53814;CVE-2009-1346

NoGe CPCommerce 1.2.8 - 'id_document' Blind SQL Injection
webapps php OSVDB-53919;CVE-2009-1345

SirGod DNS Tools (PHP Digger) - Remote Command Execution
webapps php OSVDB-53773;CVE-2009-1916;CVE-2009-1361

YEnH4ckEr webSPELL 4.2.0c - Bypass BBCode Cross-Site Scripting Cookie Stealing
webapps php OSVDB-53782;CVE-2009-1408

ZoRLu Online Password Manager 4.1 - Insecure Cookie Handling
webapps php OSVDB-53775

Dns-Team NetHoteles 2.0/3.0 - Authentication Bypass
webapps php

Nine:Situations:Group Geeklog 1.5.2 - 'savepreferences()/*blocks[]' SQL Injection
webapps php OSVDB-53771

Michael Kirchner Novell Teaming 1.0 - User Enumeration / Multiple Cross-Site Scripting Vulnerabilities
webapps java CVE-2009-1294;OSVDB-53937

ahmadbady FreeWebShop.org 2.2.9 RC2 - 'lang_file' Local File Inclusion
webapps php OSVDB-53708;CVE-2009-2338

ZoRLu Job2C 4.2 - 'adtype' Local File Inclusion
webapps php OSVDB-53718;OSVDB-53717;OSVDB-53716