laurent gaffié Apple iTunes 8.0.2.20/QuickTime 7.5.5 - '.mov' Multiple Off By Overflows (PoC)
dos windows OSVDB-56781;CVE-2008-5406

R3d-D3V!L Active Price Comparison 4 - 'ProductID' Blind SQL Injection
webapps php OSVDB-50834;CVE-2008-5975;CVE-2008-5638;OSVDB-50401

Pouya_Server Basic-CMS - 'q' Cross-Site Scripting
webapps php OSVDB-106994

Pouya_Server Venalsur Booking Centre 2.01 - Multiple Cross-Site Scripting Vulnerabilities
webapps php OSVDB-106993;OSVDB-106829

Pouya_Server ParsBlogger - 'blog.asp' Cross-Site Scripting
webapps asp OSVDB-106992

Charalambous Glafkos Ocean12 Mailing LisManager Gold 2.04 - 'Email' SQL Injection
webapps asp CVE-2008-5978;OSVDB-50395

Charalambous Glafkos Ocean12 (Multiple Products) - 'Admin_ID' SQL Injection
webapps asp OSVDB-105625

Charalambous Glafkos Ocean12 FAQ Manager Pro - 'Keyword' Cross-Site Scripting
webapps asp OSVDB-105624

R3d-D3V!L Active Test 2.1 - 'QuizID' Blind SQL Injection
webapps asp OSVDB-50407;CVE-2008-5958;OSVDB-50406;OSVDB-50405

CWH Underground Lito Lite CMS - 'cid' SQL Injection
webapps php OSVDB-50319;CVE-2008-5636

Cyber-Zone Active Web Helpdesk 2 - Authentication Bypass
webapps asp

CWH Underground ASPThai.Net Forum 8.5 - Remote Database Disclosure
webapps asp OSVDB-50329;CVE-2008-6872

CWH Underground OpenForum 0.66 Beta - Remote Reset Admin Password
webapps php OSVDB-57471;CVE-2008-7066

R3d-D3V!L Active Web Mail 4 - Blind SQL Injection
webapps asp OSVDB-56418;CVE-2008-6873;OSVDB-56417;OSVDB-56416

R3d-D3V!L ActiveVotes 2.2 - 'AccountID' Blind SQL Injection
webapps asp OSVDB-50391;CVE-2008-5365

Cyber-Zone PHP TV Portal 2.0 - 'mid' SQL Injection
webapps php OSVDB-50385;CVE-2008-6285