laurent.desaulniers osCommerce 2.2/3.0 - 'oscid' Session Fixation
webapps php OSVDB-55933

Bugs NotHugs SAP Business Objects Crystal Reports 7-10 - 'viewreport.asp' Cross-Site Scripting
webapps asp

sk BlogEngine.NET 1.4 - 'search.aspx' Cross-Site Scripting
webapps asp CVE-2008-6476;OSVDB-44290

brain[pillow] TinyPHPForum 3.61 - File Disclosure / Code Execution
webapps php

cOndemned MyioSoft Ajax Portal 3.0 - 'page' SQL Injection
webapps php OSVDB-53122;CVE-2009-1509

ahmadbady Koschtit Image Gallery 1.82 - Multiple Local File Inclusions
webapps php OSVDB-54193;CVE-2009-1510;OSVDB-54192

TEAMELITE Turnkey eBook Store 1.1 - 'keywords' Cross-Site Scripting
webapps php CVE-2009-1225;OSVDB-53121

SCS team Sun Java System Calendar Server 6 - 'command.shtml' Cross-Site Scripting
webapps java CVE-2009-1218;OSVDB-53180

Dimi4 vsp stats processor 0.45 - 'gamestat.php?gameID' SQL Injection
webapps php OSVDB-53201;CVE-2009-1224

DarKdewiL PHPRecipeBook 2.39 - 'course_id' SQL Injection
webapps php CVE-2009-4883;OSVDB-52515

ThE g0bL!N JobHut 1.2 - Remote Password Change/Delete/Activate User
webapps php

Salvatore Fresta webEdition 6.0.0.4 - 'WE_LANGUAGE' Local File Inclusion
webapps php OSVDB-53068;CVE-2009-1222

waraxe virtuemart 1.1.2 - Multiple Vulnerabilities
webapps php

waraxe VirtueMart 1.1.2 - SQL Injection (Metasploit)
webapps php

BlackHawk Podcast Generator 1.1 - Remote Code Execution
webapps php OSVDB-53199;CVE-2009-1230;OSVDB-53194;CVE-2009-1226

Salvatore Fresta Community CMS 0.5 - Multiple SQL Injections
webapps php OSVDB-56086;CVE-2009-4794;OSVDB-56085