Mormoroth.net People-Trak - Login SQL Injection
webapps asp

AlpHaNiX ASP Product Catalog 1.0 - Cross-Site Scripting / File Disclosure
webapps php OSVDB-53786;CVE-2009-1322;OSVDB-53785;CVE-2009-1321

boom3rang e107 Plugin userjournals_menu - 'blog.id' SQL Injection
webapps php OSVDB-53641

NoGe FreznoShop 1.3.0 - 'id' SQL Injection
webapps php OSVDB-53681

Dr-HTmL XEngineSoft PMS/MGS/NM/Ams 1.0 - Authentication Bypass
webapps php OSVDB-53652

ahmadbady Yellow Duck Weblog 2.1.0 - 'lang' Local File Inclusion
webapps php OSVDB-53638

THUNDER X10media Mp3 Search Engine < 1.6.2 - Admin Access
webapps php

StAkeR Flatnuke 2.7.1 - 'level' Privilege Escalation
webapps php OSVDB-53655

ZoRLu FunkyASP AD System 1.1 - Arbitrary File Upload
webapps asp

DNX w3bcms Gaestebuch 3.0.0 - Blind SQL Injection
webapps php OSVDB-53614;CVE-2009-2337

SirGod RedaxScript 0.2.0 - 'Language' Local File Inclusion
webapps php OSVDB-53587

SirGod moziloCMS 1.11 - Local File Inclusion / Full Path Disclosure / Cross-Site Scripting
webapps php OSVDB-54907;CVE-2009-4209;OSVDB-54906;OSVDB-54905;OSVDB-54891;CVE-2009-1369;OSVDB-48644;CVE-2009-1368;CVE-2009-1367;CVE-2008-6126

Salvatore Fresta Loggix Project 9.4.5 - 'refer_id' Blind SQL Injection
webapps php

Salvatore Fresta PHP-Agenda 2.2.5 - Remote File Overwriting
webapps php OSVDB-55977

ThE g0bL!N Absolute Form Processor XE 1.5 - 'login.asp' SQL Injection
webapps asp

Usman Saeed Cisco Subscriber Edge Services Manager - Cross-Site Scripting / HTML Injection
webapps java CVE-2009-1287;OSVDB-53797