darkjoker Pizzis CMS 1.5.1 - Blind SQL Injection
webapps php OSVDB-51307

Khashayar Fereidani PHP-Fusion Mod vArcade 1.8 - 'comment_id' SQL Injection
webapps php OSVDB-51997

StAkeR CuteNews 1.4.6 - 'ip ban' Authorized Cross-Site Scripting / Command Execution
webapps php OSVDB-51386;OSVDB-51385

stylextra tadbook2 Module for XOOPS - 'open_book.php' SQL Injection
webapps php OSVDB-106967

Matteo Ignaccolo Plunet BusinessManager 4.1 - 'pagesUTF8/auftrag_job.jsp?Pfad' Direct Request Information Disclosure
webapps jsp CVE-2009-0700;OSVDB-52967

Matteo Ignaccolo Plunet BusinessManager 4.1 - 'pagesUTF8/Sys_DirAnzeige.jsp?Pfad' Direct Request Information Disclosure
webapps jsp CVE-2009-0700;OSVDB-52966

Matteo Ignaccolo Plunet BusinessManager 4.1 - '/pagesUTF8/auftrag_allgemeinauftrag.jsp' Multiple Cross-Site Scripting Vulnerabilities
webapps jsp CVE-2009-0699;OSVDB-52965

Moudi QuoteBook - Remote Configuration File Disclosure
webapps php OSVDB-51389;CVE-2009-0829;CVE-2009-0828;OSVDB-51388;OSVDB-51387

Khashayar Fereidani PHP-Fusion Mod E-Cart 1.3 - 'items.php' SQL Injection
webapps php OSVDB-51998;CVE-2009-0832

Khashayar Fereidani PHP-Fusion Mod Members CV (job) 1.0 - SQL Injection
webapps php OSVDB-51440;CVE-2009-0831

irk4z Joomla! Component xstandard editor 1.5.8 - Local Directory Traversal
webapps php OSVDB-51172;CVE-2009-0113

ahmadbady PollHelper - Remote Configuration File Disclosure
webapps php OSVDB-51185;CVE-2009-0827

ahmadbady BlogHelper - Remote Configuration File Disclosure
webapps php OSVDB-51204;CVE-2009-0826

ahmadbady PlaySms 0.9.3 - Multiple Local/Remote File Inclusions
webapps php OSVDB-51251;CVE-2009-0103;OSVDB-51250;OSVDB-51249;CVE-2008-5881;OSVDB-51248;OSVDB-51247

certaindeath ItCMS 2.1a - Authentication Bypass
webapps php OSVDB-51845;CVE-2009-0493

darkjoker Goople 1.8.2 - 'FrontPage.php' Blind SQL Injection
webapps php OSVDB-51244;CVE-2009-0121;CVE-2009-0111