k3vin mitnick groone glinks 2.1 - Remote File Inclusion
webapps php OSVDB-51821;CVE-2009-0463

R3d-D3V!L ClickCart 6.0 - Authentication Bypass
webapps php OSVDB-51718;CVE-2009-0462

Stack WholeHogSoftware Password Protect - Insecure Cookie Handling
webapps php OSVDB-51734;CVE-2009-0461;CVE-2009-0460

Stack WholeHogSoftware Ware Support - Insecure Cookie Handling
webapps php OSVDB-51734;CVE-2009-0461;CVE-2009-0460

LSO OpenHelpDesk 1.0.100 - 'eval()' Code Execution (Metasploit)
webapps php

DarkFig PHPSlash 0.8.1.1 - Remote Code Execution
webapps php OSVDB-51727;CVE-2009-0517

Osirys eVision CMS 2.0 - Remote Code Execution
webapps php

ahmadbady sourdough 0.3.5 - Remote File Inclusion
webapps php OSVDB-51822;CVE-2009-0456

darkjoker CMS Mini 0.2.2 - Remote Command Execution
webapps php

darkjoker phpBLASTER 1.0 RC1 - Blind SQL Injection
webapps php

ByALBAYX WholeHogSoftware Password Protect - Authentication Bypass
webapps php OSVDB-51733;CVE-2009-0459;CVE-2009-0458

ByALBAYX WholeHogSoftware Ware Support - Authentication Bypass
webapps php OSVDB-51733;CVE-2009-0459;CVE-2009-0458

ahmadbady AJA Portal 1.2 (Windows) - Local File Inclusion
webapps php OSVDB-51709;CVE-2009-0457;OSVDB-51708

Alfons Luja Flatnux 2009-01-27 - Cross-Site Scripting / Iframe Injection
webapps php OSVDB-51723

ahmadbady sma-db 0.3.12 - Remote File Inclusion / Cross-Site Scripting
webapps php OSVDB-54143;CVE-2009-1451;OSVDB-51710;CVE-2009-1450

SaiedHacker E-PHP B2B Trading Marketplace Script - Multiple Cross-Site Scripting Vulnerabilities
webapps php OSVDB-96374;OSVDB-51688