CWH Underground Benja CMS 0.1 - '/admin/admin_new_submenu.php' Cross-Site Scripting
webapps php CVE-2008-2987;OSVDB-46734

CWH Underground Benja CMS 0.1 - '/admin/admin_edit_submenu.php' Cross-Site Scripting
webapps php CVE-2008-2987;OSVDB-46733

CraCkEr IDMOS 1.0 - 'site_absolute_path' Multiple Remote File Inclusions
webapps php

CraCkEr PEGames - Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2008-2871;OSVDB-46796

CraCkEr cmsWorks 2.2 RC4 - 'mod_root' Remote File Inclusion
webapps php OSVDB-46800;CVE-2008-2877

CraCkEr ourvideo CMS 9.5 - Local File Inclusion / Remote File Inclusion / Cross-Site Scripting
webapps php OSVDB-46857;CVE-2008-2979;OSVDB-46856;OSVDB-46855;CVE-2008-2978;OSVDB-46854;CVE-2008-2977

CraCkEr mm chat 1.5 - Local File Inclusion / Cross-Site Scripting
webapps php OSVDB-46852;CVE-2008-2974;OSVDB-46851;CVE-2008-2973

CraCkEr TinXCMS 1.1 - Local File Inclusion / Cross-Site Scripting
webapps php OSVDB-46905;CVE-2008-2976;OSVDB-46904;CVE-2008-2975;OSVDB-46903;OSVDB-46902;OSVDB-46853

CraCkEr Dagger CMS 2008 - 'dir_inc' Remote File Inclusion
webapps php OSVDB-56271;CVE-2008-6636;CVE-2008-6635;OSVDB-46489

CWH Underground Demo4 CMS - 'id' SQL Injection
webapps php OSVDB-46865;CVE-2008-2983

CWH Underground MyBlog: PHP and MySQL Blog/CMS software - SQL Injection / Cross-Site Scripting
webapps php OSVDB-52185;CVE-2008-6193;OSVDB-46841;OSVDB-46840;CVE-2008-2963;OSVDB-46839;OSVDB-46830;OSVDB-46829;CVE-2008-2962

Bl@ckbe@rD MVC-Web CMS 1.0/1.2 - 'newsid' SQL Injection
webapps asp

Mr.SQL Ready2Edit - 'menuid' SQL Injection
webapps php

Cod3rZ BlogPHP 2.0 - Privilege Escalation / SQL Injection
webapps php OSVDB-53973;CVE-2008-6745

CraCkEr Open Digital Assets Repository System 1.0.2 - Remote File Inclusion
webapps php

CraCkEr odars CMS 1.0.2 - Remote File Inclusion
webapps php OSVDB-46486;CVE-2008-2885