x0r pHNews Alpha 1 - 'mod' SQL Injection
webapps php

x0r S-CMS 1.1 Stable - Insecure Cookie Handling / Mass Page Delete
webapps php OSVDB-52571;CVE-2009-0864;OSVDB-52570;CVE-2009-0863

ZoRLu SAS Hotel Management System - Arbitrary File Upload
webapps asp OSVDB-51999

JIKO Clipbucket 1.7 - 'dwnld.php' Directory Traversal
webapps php OSVDB-107980

x0r Grestul 1.x - Cookie Authentication Bypass
webapps php

waraxe ravennuke 2.3.0 - Multiple Vulnerabilities
webapps php OSVDB-56451;CVE-2009-0678;OSVDB-52632;CVE-2009-0677;OSVDB-52298;CVE-2009-0674;CVE-2009-0673;OSVDB-52007;CVE-2009-0672

ahmadbady YACS CMS 8.11 - 'update_trailer.php' Remote File Inclusion
webapps php OSVDB-52041

Darkb0x SAS Hotel Management System - 'id' SQL Injection
webapps asp OSVDB-51982

StAkeR MemHT Portal 4.0.1 - Delete All Private Messages
webapps php OSVDB-51983

brain[pillow] Novaboard 1.0.0 - Multiple Vulnerabilities
webapps php OSVDB-54061;OSVDB-54060;OSVDB-54059;OSVDB-54058

brain[pillow] powermovielist 0.14b - SQL Injection / Cross-Site Scripting
webapps php

Osirys simplePms CMS 0.1.4 - Local File Inclusion / Remote Command Execution
webapps php

Sp3shial Falt4 CMS RC4 - 'FCKeditor' Arbitrary File Upload
webapps php OSVDB-53650;CVE-2008-6178

rAWjAW InselPhoto 1.1 - Cross-Site Scripting
webapps php

Osirys CmsFaethon 2.2.0 - 'item' SQL Injection
webapps php CVE-2009-5094;OSVDB-75374

Osirys BlogWrite 0.91 - Remote File Disclosure / SQL Injection
webapps php OSVDB-51978