x0r Mynews 0.10 - Authentication Bypass
webapps php OSVDB-52255;CVE-2009-0739

x0r AuthPhp 1.0 - Authentication Bypass
webapps php OSVDB-51885;CVE-2009-0738

x0r Potato News 1.0.0 - Local File Inclusion
webapps php OSVDB-52258;CVE-2009-0722

Fireshot Q-News 2.0 - Remote Command Execution
webapps php

SirGod Papoo CMS 3.x - 'pfadhier' Local File Inclusion
webapps php OSVDB-51858;CVE-2009-0735

cheverok Thyme 1.3 - 'export_to' Local File Inclusion
webapps php OSVDB-51959;CVE-2009-0535;OSVDB-51864

JIKO eZoneScripts (Multiple Scripts) - Insecure Cookie Authentication Bypass
webapps php

aGGreSSor Bitrix Site Manager 6/7 - Multiple Input Validation Vulnerabilities
webapps php OSVDB-106028;OSVDB-105740

Stelios Tigkas FotoWeb 6.0 - 'Grid.fwx?search' Cross-Site Scripting
webapps php CVE-2009-0573;OSVDB-51855

Stelios Tigkas FotoWeb 6.0 - 'Login.fwx?s' Cross-Site Scripting
webapps php CVE-2009-0573;OSVDB-51854

Osirys Hedgehog-CMS 1.21 - Local File Inclusion / Remote Command Execution
webapps php

bd0rk Gaeste 1.6 - 'gastbuch.php' Remote File Disclosure
webapps php CVE-2009-5093;OSVDB-75373

ahmadbady WB News 2.1.1 - config[installdir] Remote File Inclusion
webapps php CVE-2009-0294;OSVDB-51591;OSVDB-51589;OSVDB-51588;OSVDB-51587;OSVDB-51586;OSVDB-51585;OSVDB-51584;OSVDB-51583

ahmadbady webframe 0.76 - Multiple File Inclusions
webapps php OSVDB-51872;CVE-2009-0514;OSVDB-51871;CVE-2009-0513;OSVDB-51870;OSVDB-51869

Kacper Yet Another NOCC 0.1.0 - Local File Inclusion
webapps php OSVDB-51868;CVE-2009-0515

make0day ZeroBoardXE 1.1.5 (09.01.22) - Cross-Site Scripting
webapps php OSVDB-51898