w0cker Cybershade CMS 0.2b - Remote File Inclusion
webapps php OSVDB-52005

ZoRLu Tribiq CMS 5.0.9a (Beta) - Insecure Cookie Handling
webapps php OSVDB-54418;CVE-2008-6804

ZoRLu e107 Plugin lyrics_menu - 'l_id' SQL Injection
webapps php OSVDB-49492;CVE-2008-4906

Hakxer Absolute Poll Manager XE 4.1 - Insecure Cookie Handling
webapps php OSVDB-55912;CVE-2008-6860

Hakxer Absolute Podcast 1.0 - Remote Insecure Cookie Handling
webapps php OSVDB-49467;CVE-2008-6857

Hakxer Absolute File Send 1.0 - Remote Insecure Cookie Handling
webapps php

StAkeR MyPHP Forum 3.0 - Edit Topics / Blind SQL Injection
webapps php OSVDB-54241;CVE-2008-6777

Pouya_Server Dorsa CMS - 'Default_.aspx' Cross-Site Scripting
webapps asp OSVDB-49456

ShockShadow Extrakt Framework 0.7 - 'index.php' Cross-Site Scripting
webapps php CVE-2008-6217;OSVDB-52282

cize0f KKE Info Media Kmita Gallery - Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2008-5068;OSVDB-49445;OSVDB-49444

Hussin X Pro Traffic One - 'poll_results.php' SQL Injection
webapps php OSVDB-49482;CVE-2008-6214

d3b4g Venalsur on-line Booking Centre - Cross-Site Scripting / SQL Injection
webapps php OSVDB-52284;CVE-2008-6216;OSVDB-52283;CVE-2008-6215;OSVDB-49447;OSVDB-49446

Beenu Arora Harlandscripts Pro Traffic One - 'mypage.php' SQL Injection
webapps php OSVDB-49481;CVE-2008-6213

t0pP8uZz WebCards 1.3 - SQL Injection
webapps php OSVDB-49422;CVE-2008-4878;OSVDB-49421;CVE-2008-4877

t0pP8uZz Mambo Component SimpleBoard 1.0.1 - Arbitrary File Upload
webapps php OSVDB-54806;CVE-2008-6814

t0pP8uZz WordPress Plugin E-Commerce 3.4 - Arbitrary File Upload
webapps php OSVDB-54564;CVE-2008-6811