NoGe LetterIt 2 - 'Language' Local File Inclusion
webapps php OSVDB-47249;CVE-2008-3446

EgiX Coppermine Photo Gallery 1.4.18 - Local File Inclusion / Remote Code Execution
webapps php OSVDB-47353;CVE-2008-3486;OSVDB-47250;CVE-2008-3481

Raz0r Symphony 1.7.01 (non-patched) - Remote Code Execution
webapps php OSVDB-47324;CVE-2008-3592;OSVDB-47323;CVE-2008-3591

gnix PHPX 3.5.16 - Cookie Poisoning / Authentication Bypass
webapps php OSVDB-47378;CVE-2008-3489

Dr.Crash DEV Web Management System 1.5 - Multiple Input Validation Vulnerabilities
webapps php

DSecRG MJGUEST 6.8 - 'Guestbook.js.php' Cross-Site Scripting
webapps php CVE-2008-3404;OSVDB-47246

GulfTech Security Pligg CMS 9.9.0 - Cross-Site Scripting / Local File Inclusion / SQL Injection
webapps php OSVDB-50198;CVE-2008-7091;OSVDB-50197;CVE-2008-7090;OSVDB-50196;OSVDB-50195;CVE-2008-7089;OSVDB-50194;CVE-2008-6968;OSVDB-50193;OSVDB-50192;OSVDB-50191;OSVDB-50190;OSVDB-50189;OSVDB-50188;OSVDB-50187;OSVDB-50186;GTSA-00112

GulfTech Security Pligg CMS 9.9.0 - Remote Code Execution
webapps php OSVDB-50189;CVE-2008-7091;GTSA-00112

Jack eNdonesia 8.4 (Calendar Module) - SQL Injection
webapps php OSVDB-47355;CVE-2008-3452

Hussin X TubeGuru Video Sharing Script - 'UID' SQL Injection
webapps php OSVDB-47235;CVE-2008-3674

Hussin X PozScripts Classified Ads Script - 'cid' SQL Injection
webapps php OSVDB-47226;CVE-2008-3673;OSVDB-47225;CVE-2008-3672

Stack HIOX Browser Statistics 2.0 - Arbitrary Add Admin
webapps php

Mr.SQL Article Friendly Pro/Standard - SQL Injection
webapps php OSVDB-47229;CVE-2008-3670;OSVDB-47228;CVE-2008-3649

Stack HIOX Random Ad 1.3 - Arbitrary Add Admin
webapps php

Mr.SQL ZeeReviews - SQL Injection
webapps php OSVDB-47230;CVE-2008-3669

Khashayar Fereidani nzFotolog 0.4.1 - 'action_file' Local File Inclusion
webapps php OSVDB-47223;CVE-2008-3405