0x90 MapCal 0.1 - 'id' SQL Injection
webapps php CVE-2008-6038;OSVDB-51692

Ciph3r UNAK-CMS - Cookie Authentication Bypass
webapps php

CWH Underground rgb72 WCMS 1.0 - 'index.php' SQL Injection
webapps asp

-SmoG- CJ Ultra Plus 1.0.4 - Cookie SQL Injection
webapps php OSVDB-48724;CVE-2008-4241

d3v1l Fez 1.3/2.0 RC1 - 'list.php' SQL Injection
webapps php OSVDB-51803;CVE-2008-6028

dun basebuilder 2.0.1 - 'main.inc.php' Remote File Inclusion
webapps php OSVDB-51800;CVE-2008-6036;OSVDB-48487

Pepelux MyBlog 0.9.8 - Insecure Cookie Handling
webapps php OSVDB-48914;CVE-2008-4341

dun OpenElec 3.01 - 'obj' Local File Inclusion
webapps php OSVDB-48519;CVE-2008-6025

Stack WSN Links Free 4.0.34P - 'comments.php' Blind SQL Injection
webapps php OSVDB-51951;CVE-2008-6032

CWH Underground WCMS 1.0b - 'news_detail.asp' SQL Injection
webapps php

~!Dok_tOR!~ BuzzyWall 1.3.1 - 'search' SQL Injection
webapps php OSVDB-48532;CVE-2008-6029

Stack PHP iCalendar 2.24 - Insecure Cookie Handling
webapps php OSVDB-51157;CVE-2008-5840

d3v1l WSN Links 2.20 - 'comments.php' SQL Injection
webapps php OSVDB-51801;CVE-2008-6033

d3v1l WSN Links 2.22/2.23 - 'vote.php' SQL Injection
webapps php OSVDB-51802;CVE-2008-6031

CWH Underground WCMS 1.0b - Arbitrary Add Admin
webapps php

r45c4l BlueCUBE CMS - 'tienda.php' SQL Injection
webapps php CVE-2008-6026;OSVDB-48465