Ciph3r UNAK-CMS - Cookie Authentication Bypass
webapps php

CWH Underground rgb72 WCMS 1.0 - 'index.php' SQL Injection
webapps asp

CWH Underground WCMS 1.0b - 'news_detail.asp' SQL Injection
webapps php

~!Dok_tOR!~ BuzzyWall 1.3.1 - 'search' SQL Injection
webapps php OSVDB-48532;CVE-2008-6029

CWH Underground WCMS 1.0b - Arbitrary Add Admin
webapps php

r45c4l BlueCUBE CMS - 'tienda.php' SQL Injection
webapps php CVE-2008-6026;OSVDB-48465

DigiTrust Group eXtrovert software Thyme 1.3 - 'add_calendars.php' Cross-Site Scripting
webapps php CVE-2008-6404;OSVDB-52399

Encrypt3d.M!nd Netartmedia Real Estate Portal 1.2 - SQL Injection
webapps php OSVDB-48412;CVE-2008-6042

Encrypt3d.M!nd Netartmedia Jobs Portal 1.3 - Multiple SQL Injections
webapps php OSVDB-48413;CVE-2008-6030

boom3rang e107 Plugin Image Gallery 0.9.6.2 - SQL Injection
webapps php OSVDB-52697;CVE-2008-6466

NT Internals DESlock+ 3.2.7 - 'vdlptokn.sys' Local Denial of Service
dos windows OSVDB-48415;CVE-2008-4362

InjEctOr5 AvailScript Jobs Portal Script - (Authenticated) Arbitrary File Upload
webapps php OSVDB-57326;CVE-2008-7021

CWH Underground Rianxosencabos CMS 0.9 - Arbitrary Add Admin
webapps php OSVDB-49097;CVE-2008-4245

waraxe Invision Power Board 2.3.5 - SQL Injection
webapps php

Luigi Auriemma Unreal Tournament 3 1.3 - Directory Traversal
remote windows OSVDB-48419;CVE-2008-4243

Rohit Bansal Achievo 1.3.2 - 'atknodetype' Cross-Site Scripting
webapps php CVE-2008-6034;OSVDB-48485