Ghost Hacker ClickBank Portal - 'search.php' Cross-Site Scripting
webapps php CVE-2008-4670;OSVDB-49235

Ghost Hacker Lyrics Script - 'search_results.php' Cross-Site Scripting
webapps php CVE-2008-4672;OSVDB-49234

Ghost Hacker WhoDomLite 1.1.3 - 'wholite.cgi' Cross-Site Scripting
webapps cgi CVE-2008-4737;OSVDB-48630

JIKO X7 Chat 2.0.1A1 - Local File Inclusion
webapps php OSVDB-49302;CVE-2008-4718

dun Yoxel 1.23beta - 'itpm_estimate.php' Remote Code Execution
webapps php OSVDB-49881;CVE-2008-5071

InjEctOr5 PHP-Lance 1.52 - 'catid' SQL Injection
webapps php OSVDB-48615;CVE-2008-4716

r45c4l PowerPortal 2.0.13 - 'path' Local Directory Traversal
webapps php OSVDB-48665;CVE-2008-4361

r45c4l MyCard 1.0.2 - 'id' SQL Injection
webapps php OSVDB-48617;CVE-2008-4738

dun PlugSpace 0.1 - 'navi' Local File Inclusion
webapps php OSVDB-48628;CVE-2008-4739

dun LnBlog 0.9.0 - 'plugin' Local File Inclusion
webapps php OSVDB-48613;CVE-2008-4712

CraCkEr Real Estate Manager 1.01 - 'cat_id' SQL Injection
webapps php OSVDB-48631;CVE-2008-4674

DaRkLiFe CoAST 0.95 - 'sections_file' Remote File Inclusion
webapps php OSVDB-48614;CVE-2008-4735

~!Dok_tOR!~ E-Uploader Pro 1.0 - Multiple SQL Injections
webapps php OSVDB-49934;CVE-2008-5075;OSVDB-49933;OSVDB-49932;OSVDB-49931;OSVDB-49930;OSVDB-49929;OSVDB-49928

~!Dok_tOR!~ Joovili 3.0 - Multiple SQL Injections
webapps php OSVDB-49294;CVE-2008-4711;OSVDB-49293;OSVDB-49292;OSVDB-49291;OSVDB-49290;OSVDB-49289

Mi4night Camera Life 2.6.2b4 - Arbitrary File Upload
webapps php OSVDB-49892;CVE-2008-4366

elusiven Vbgooglemap Hotspot Edition 1.0.3 - SQL Injection
webapps php OSVDB-49276;CVE-2008-4706;OSVDB-48611