SirGod BandSite CMS 1.1.4 - Download Backup / Cross-Site Scripting / Cross-Site Request Forgery
webapps php OSVDB-57368;CVE-2008-7058;OSVDB-57362;CVE-2008-7057;OSVDB-57361;CVE-2008-7056

~!Dok_tOR!~ Photocart 3.9 - Multiple SQL Injections
webapps php OSVDB-47820;CVE-2008-3788;OSVDB-47819

~!Dok_tOR!~ CustomCMS 4.0 - 'print.php' SQL Injection
webapps php OSVDB-47790;CVE-2008-4156

Juraj Skripsky Mono 2.0 - 'System.Web' HTTP Header Injection
remote linux CVE-2008-3906;OSVDB-47855

Core Security vBulletin 3.6.10/3.7.2 - '$newpm[title]' Cross-Site Scripting
webapps php CVE-2008-3773;OSVDB-47591

Mr.SQL Pars4U Videosharing 1.0 - Cross-Site Scripting / Blind SQL Injection
webapps php OSVDB-47815;CVE-2008-3772;OSVDB-47598;CVE-2008-3771

Core Security Anzio Web Print Object 3.2.30 - ActiveX Buffer Overflow
remote windows OSVDB-47592;CVE-2008-3480

GulfTech Security Vanilla 1.1.4 - HTML Injection / Cross-Site Scripting
webapps php CVE-2008-3758;OSVDB-47684;GTSA-00118;BID: 30748

Reth Linux/x86 - setreuid(geteuid_ geteuid) + execve(/bin/sh) Shellcode (39 bytes)
linux_x86 39

c0d3_z3r0 FreeBSD/x86 - execve(/bin/sh) + Encoded Shellcode (48 bytes)
freebsd_x86 48

GulfTech Security SunShop Shopping Cart 4.1.4 - 'id' SQL Injection
webapps php OSVDB-47590;CVE-2008-3768;GTSA-00117

Th1nk3r TWiki 4.2.0 - 'configure' Remote File Disclosure
webapps cgi OSVDB-48221;CVE-2008-4112;CVE-2008-3195

baltazar K Web CMS - 'sayfala.asp' SQL Injection
webapps asp

baltazar itMedia - Multiple SQL Injections
webapps php

Khashayar Fereidani NewsHOWLER 1.03 - Cookie Data SQL Injection
webapps php CVE-2008-6517;OSVDB-52236

Digital Security Research Group Freeway 1.4.1.171 - '/templates/Freeway/mainpage_modules/mainpage.php?language' Traversal Local File Inclusion
webapps php CVE-2008-3770;OSVDB-47835