bd0rk ea-gBook 0.1 - Remote Command Execution / Remote File Inclusion
webapps php OSVDB-52044;CVE-2009-5095

JIKO Vlinks 1.1.6 - 'id' SQL Injection
webapps php OSVDB-51988;CVE-2009-5091

nuclear ideacart 0.02 - Local File Inclusion / SQL Injection
webapps php OSVDB-52043;OSVDB-52042;CVE-2009-5089;CVE-2009-5088

Aria-Security Team Baran CMS 1.0 - 'Arbitrary '.ASP' File Upload / File Disclosure / SQL Injection / Cross-Site Scripting / Cookie Manipulation
webapps asp

Muhacir Free Joke Script 1.0 - Authentication Bypass
webapps php OSVDB-55106;OSVDB-51919;OSVDB-51918

x0r PHP Krazy Image Host Script 1.01 - 'id' SQL Injection
webapps php OSVDB-51917

Osirys InselPhoto 1.1 - 'query' SQL Injection
webapps php

nuclear Den Dating 9.01 - 'txtlookgender' SQL Injection
webapps php OSVDB-51899

Osirys Bloggeruniverse 2.0 Beta - 'id' SQL Injection
webapps php CVE-2009-5090;OSVDB-75372

Mehmet Ince dacio's CMS 1.08 - Cross-Site Scripting / SQL Injection / File Disclosure
webapps php

x0r Graugon Gallery 1.0 - Cross-Site Scripting / SQL Injection / Cookie Bypass
webapps php OSVDB-52047;OSVDB-52046

ZoRLu SkaDate Online 7 - Arbitrary File Upload
webapps php

Francesco Bianchino Banking@Home 2.1 - 'login.asp' Multiple SQL Injections
webapps asp CVE-2009-0741;OSVDB-51915

Lolek TYPO3 < 4.0.12/4.1.10/4.2.6 - 'jumpUrl' Remote File Disclosure
webapps php OSVDB-52048;CVE-2009-0815

Osirys Fluorine CMS 0.1 rc 1 - File Disclosure / SQL Injection / Command Execution
webapps php

x0r BlueBird Pre-Release - Authentication Bypass
webapps php OSVDB-52254;CVE-2009-0740