d3v1l BoutikOne CMS - 'search_query' Cross-Site Scripting
webapps php CVE-2008-5126;OSVDB-49905

G4N0K VideoScript 4.0.1.50 - Change Admin Password
webapps php OSVDB-49885;CVE-2008-5219

eek Ultrastats 0.2.144/0.3.11 - 'serverid' SQL Injection
webapps php OSVDB-49910;CVE-2008-6260

Hussin X SaturnCMS - Blind SQL Injection
webapps php OSVDB-49913;CVE-2008-6263;OSVDB-49912;CVE-2008-6262

d3b4g Simple Customer 1.2 - Authentication Bypass
webapps php OSVDB-49916;CVE-2008-6332;CVE-2008-6326

ZoRLu Jadu Galaxies - 'categoryId' Blind SQL Injection
webapps php OSVDB-49908;CVE-2008-6254

ahmadbady PHPfan 3.3.4 - 'init.php' Remote File Inclusion
webapps php OSVDB-49935;CVE-2008-6251

Bl@ckbe@rD Q-Shop 3.0 - Cross-Site Scripting / SQL Injection
webapps asp OSVDB-50173;CVE-2008-6259;OSVDB-50169;CVE-2008-6258

cOndemned FREEze Greetings 1.0 - Remote Password Retrieve
webapps php OSVDB-49883;CVE-2008-5218

Hussin X E-topbiz ADManager 4 - 'group' Blind SQL Injection
webapps php OSVDB-49917;CVE-2008-6261

StAkeR OpenASP 3.0 - Blind SQL Injection
webapps asp OSVDB-49914;CVE-2008-6257

ahmadbady mxCamArchive 2.2 - Bypass Configuration Download
webapps php OSVDB-49887;CVE-2008-6956;OSVDB-49886;CVE-2008-6955

Hussin X PHPstore Wholesale - 'id' SQL Injection
webapps php OSVDB-49867;CVE-2008-5493

Vrs-hCk FloSites Blog - Multiple SQL Injections
webapps php OSVDB-49866

snakespc yahoo answers - 'id' SQL Injection
webapps php OSVDB-49906;CVE-2008-5490

Alfons Luja Minigal b13 - Remote File Disclosure
webapps php OSVDB-56976;CVE-2008-6933