DaiMon WSN Guest 1.23 - 'Search' SQL Injection
webapps php OSVDB-52260;CVE-2009-0704

StAkeR PNPHPBB2 < 1.2i - 'ModName' Multiple Local File Inclusions
webapps php OSVDB-51129;CVE-2009-0592;OSVDB-51128;OSVDB-51127;OSVDB-51126;OSVDB-51125;OSVDB-51124

StAkeR webSPELL 4.01.02 - 'id' Remote Edit Topics
webapps php

anonymous webSPELL 4 - Authentication Bypass
webapps php

darkjoker Lito Lite CMS - Multiple Cross-Site Scripting / Blind SQL Injection Vulnerabilities
webapps php OSVDB-51255

ahmadbady phpskelsite 1.4 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
webapps php OSVDB-51215;CVE-2009-0596;OSVDB-51214;CVE-2009-0595;OSVDB-51213;CVE-2009-0594

ZoRLu Built2Go PHP Rate My Photo 1.46.4 - Arbitrary File Upload
webapps php

ZoRLu Built2Go PHP Link Portal 1.95.1 - Arbitrary File Upload
webapps php

Virangar Security PowerClan 1.14a - Authentication Bypass
webapps php OSVDB-51112;CVE-2009-0707

Virangar Security PowerNews 2.5.4 - 'newsid' SQL Injection
webapps php OSVDB-51110;CVE-2009-0705

DNX w3blabor CMS 3.3.0 - Authentication Bypass
webapps php OSVDB-51108;CVE-2009-0597

ahmadbady phpScribe 0.9 - 'user.cfg' Remote Configuration Disclosure
webapps php

Lo$er Memberkit 1.0 - Arbitrary File Upload
webapps php OSVDB-51207

KinG-LioN PHPFootball 1.6 - Remote Hash Disclosure
webapps php OSVDB-51105;CVE-2009-0711;OSVDB-51104;CVE-2009-0710;OSVDB-51103;OSVDB-51102;CVE-2009-0709

DaiMon ASPThai.Net WebBoard 6.0 - SQL Injection
webapps php OSVDB-52261;CVE-2009-0703

x0r EggBlog 3.1.10 - Cross-Site Request Forgery (Change Admin Password)
webapps php OSVDB-51078