certaindeath SmartSiteCMS 1.0 - Blind SQL Injection
webapps php OSVDB-51786;CVE-2009-0405

snakespc Social Engine 3.06 - 'category_id' SQL Injection
webapps php OSVDB-51644;CVE-2009-0400

Salvatore Fresta Max.Blog 1.0.6 - 'offline_auth.php' Offline Authentication Bypass
webapps php OSVDB-51645;CVE-2009-0409

Salvatore Fresta Max.Blog 1.0.6 - 'submit_post.php' SQL Injection
webapps php

mozi phpList 2.10.x - Remote Code Execution / Local File Inclusion
webapps php

OzX Lore 1.5.6 - 'article.php' Blind SQL Injection
webapps php

fuzion Gazelle CMS 1.0 - 'template' Local File Inclusion
webapps php OSVDB-51655;CVE-2009-3167

x0r Chipmunk Blog - (Authentication Bypass) Add Admin
webapps php OSVDB-51789;CVE-2009-0403;OSVDB-51787;CVE-2009-0399

Encrypt3d.M!nd gamescript 4.6 - Cross-Site Scripting / SQL Injection / Local File Inclusion
webapps php OSVDB-51654;OSVDB-51649;OSVDB-51648

darkjoker Community CMS 0.4 - 'id' Blind SQL Injection
webapps php OSVDB-51785;CVE-2009-0406

DSecRG Pixie CMS 1.0 - Multiple Local File Inclusions
webapps php OSVDB-51599;OSVDB-51598

Salvatore Fresta Max.Blog 1.0.6 - 'show_post.php' SQL Injection
webapps php

S.W.A.T. Flax Article Manager 1.1 - Remote PHP Script Upload
webapps php

Sarid Harper OpenX 2.6.2 - 'MAX_type' Local File Inclusion
webapps php CVE-2009-0291;OSVDB-53823

Arash Setayeshi Lootan - 'login.asp' SQL Injection
webapps asp OSVDB-52030

David Vieira-Kurz ConPresso CMS 4.07 - Multiple Remote Vulnerabilities
webapps php OSVDB-51595;OSVDB-51594