Dr.Crash EasyBookMarker 4.0 - 'ajaxp_backend.php' Cross-Site Scripting
webapps php CVE-2008-3380;OSVDB-47102

Virangar Security EZWebAlbum - Insecure Cookie Handling
webapps php OSVDB-47163;CVE-2008-3292

Cr@zy_King ShopCartDx 4.30 - 'pid' SQL Injection
webapps php OSVDB-47107;CVE-2008-3346

Ghost Hacker EZWebAlbum - Remote File Disclosure
webapps php OSVDB-47164;CVE-2008-3293

Mr.SQL MojoAuto - Blind SQL Injection
webapps cgi OSVDB-47099;CVE-2008-3383

Mr.SQL MojoJobs - Blind SQL Injection
webapps cgi OSVDB-47108;CVE-2008-3267

Mr.SQL MojoPersonals - Blind SQL Injection
webapps cgi OSVDB-47109;CVE-2008-3403

Mr.SQL MojoClassifieds 2.0 - Blind SQL Injection
webapps cgi OSVDB-47123;CVE-2008-3382

DSecRG Interact 2.4.1 - 'help.php' Local File Inclusion
webapps php OSVDB-47125;CVE-2008-3384

Mr.SQL HRS Multi - 'key' Blind SQL Injection
webapps asp OSVDB-47101;CVE-2008-3266

Mr.SQL DigiLeave 1.2 - 'book_id' Blind SQL Injection
webapps asp OSVDB-47181;CVE-2008-3309

Luigi Auriemma SWAT 4 - Multiple Denial of Service Vulnerabilities
dos multiple CVE-2008-3286;OSVDB-47274

Mr.SQL PHPFootball 1.6 - SQL Injection
webapps php OSVDB-47243;CVE-2008-3387

Joxean Koret Oracle Internet Directory 10.1.4 - Remote Denial of Service
dos multiple CVE-2008-2595;OSVDB-47719

CWH Underground Def_Blog 1.0.3 - 'comlook.php?article' SQL Injection
webapps php CVE-2008-3388;OSVDB-47092

CWH Underground Def_Blog 1.0.3 - 'comaddok.php?article' SQL Injection
webapps php CVE-2008-3388;OSVDB-47091