Arash Setayeshi LDF - 'login.asp' SQL Injection
webapps asp OSVDB-52027

Charlie Briggs OpenX 2.6.3 - 'MAX_type' Local File Inclusion
webapps php OSVDB-52167;CVE-2009-0291

TurkGuvenligi Joomla! Component ElearningForce Flash Magazine Deluxe - SQL Injection
webapps php OSVDB-51593;CVE-2009-0373

R3d-D3V!L ClickAuction - Authentication Bypass
webapps php OSVDB-51626;CVE-2009-0297

darkjoker SiteXS CMS 0.1.1 - Local File Inclusion
webapps php OSVDB-51798;CVE-2009-0371

nuclear Groone's GLink ORGanizer - 'index.php?cat' SQL Injection
webapps php OSVDB-51628;CVE-2009-0299

nuclear Wazzum Dating Software - 'userid' SQL Injection
webapps php OSVDB-51625;CVE-2009-0293

darkjoker PHP-CMS 1 - 'Username' Blind SQL Injection
webapps php OSVDB-51784;CVE-2009-0407

FeDeReR SHOP-INET 4 - 'grid' SQL Injection
webapps php OSVDB-51615;CVE-2009-0292

k1n9k0ng Script Toko Online 5.01 - SQL Injection
webapps php OSVDB-51630;CVE-2009-0296

InjEctOr5 E-ShopSystem - Authentication Bypass / SQL Injection
webapps asp

fuzion ITLPoll 2.7 Stable2 - Blind SQL Injection
webapps php OSVDB-51616;CVE-2009-0295

Xianur0 Simple Machines Forum (SMF) 1.1.7 - Cross-Site Request Forgery / Cross-Site Scripting / Package Upload
webapps php

Pouya_Server EPOLL SYSTEM 3.1 - 'Password.dat' Disclosure
webapps php

fuzion OpenGoo 1.1 - Local File Inclusion
webapps php OSVDB-51635;CVE-2009-0286

JIKO Flax Article Manager 1.1 - 'cat_id' SQL Injection
webapps php OSVDB-51560;CVE-2009-0284