Adam Baldwin ExpressionEngine 1.6 - Avtaar Name HTML Injection
webapps php CVE-2009-1070;OSVDB-52845

Justin Keane Pixie CMS - Cross-Site Scripting / SQL Injection
webapps php OSVDB-52833;CVE-2009-1067;OSVDB-52832;CVE-2009-1066

Emory University Hannon Hill Cascade Server - (Authenticated) Command Execution
webapps cgi OSVDB-52957;CVE-2009-1088

Fireshot Bloginator 1a - SQL Injection / Command Injection (via Cookie Bypass )
webapps php OSVDB-52839;CVE-2009-1049

Fireshot Bloginator 1a - Cookie Bypass / SQL Injection
webapps php OSVDB-52839;CVE-2009-1050;OSVDB-52838;CVE-2009-1049

girex DeluxeBB 1.3 - 'qorder' SQL Injection
webapps php OSVDB-52788;CVE-2010-4151;CVE-2009-1033

Alfons Luja Pivot 1.40.6 - Arbitrary File Deletion
webapps php OSVDB-52772

boom3rang Advanced Image Hosting (AIH) 2.3 - 'gal' Blind SQL Injection
webapps php OSVDB-52813;CVE-2009-1032

any.zicky Facil-CMS 0.1RC2 - Multiple Vulnerabilities
webapps php

anonymous phpCMS 2008 - 'search_ajax.php' SQL Injection
webapps php

syniack Sun Java System Messenger Express 6.3-0.15 - 'error' Cross-Site Scripting
webapps java

Garry Mega File Hosting Script 1.2 - 'url' Remote File Inclusion
webapps php OSVDB-52789;CVE-2009-0966

strange kevin WordPress Plugin fMoblog 2.1 - 'id' SQL Injection
webapps php OSVDB-52836;CVE-2009-0968

g4t3w4y GDL 4.x - 'node' SQL Injection
webapps php OSVDB-52803;CVE-2009-0965

BugReport.IR PHPRunner 4.2 - 'SearchOption' Blind SQL Injection
webapps php OSVDB-52804;CVE-2009-0964;OSVDB-52801;CVE-2009-0963;OSVDB-52800;OSVDB-52799;OSVDB-52798

boom3rang phpComasy 0.9.1 - 'entry_id' SQL Injection
webapps php OSVDB-52817;CVE-2009-1023