CWH Underground MyPHP CMS 0.3.1 - 'pid' SQL Injection
webapps php OSVDB-47445;CVE-2008-3497

CWH Underground Page Manager CMS 2006-02-04 - Arbitrary File Upload
webapps php OSVDB-57820;CVE-2008-7167

Ded MustD!e Mambo Component Articles - 'artid' Blind SQL Injection
webapps php

Hussin X Jokes & Funny Pics Script - 'sb_jokeid' SQL Injection
webapps php OSVDB-46516;CVE-2008-2874

StAkeR mUnky 0.0.1 - 'zone' Local File Inclusion
webapps php OSVDB-46799;CVE-2008-2876

CWH Underground Webdevindo-CMS 0.1 - 'hal' SQL Injection
webapps php OSVDB-46798;CVE-2008-2875

k1tk4t TOKOKITA - 'produk_id' SQL Injection
webapps php

Hussin X Link ADS 1 - 'linkid' SQL Injection
webapps php OSVDB-46497;CVE-2008-2869

Hussin X E-topbiz ViralDX 2.07 - 'bannerid' SQL Injection
webapps php OSVDB-46504;CVE-2008-2867

security fears team HiveMaker Directory 1.0.2 - 'cid' SQL Injection
webapps php OSVDB-45916;CVE-2008-6427

Bl@ckbe@rD DUcalendar 1.0 - 'iEve' SQL Injection
webapps asp OSVDB-46505;CVE-2008-2868

CWH Underground ShareCMS 0.1 - Multiple SQL Injections
webapps php OSVDB-46795;CVE-2008-2870;OSVDB-46794

K-159 Relative Real Estate Systems 3.0 - 'listing_id' SQL Injection
webapps php OSVDB-47087;CVE-2008-3185;OSVDB-47043;CVE-2008-2881

CraCkEr A+ PHP Scripts News Management System 0.3 - Multiple Input Validation Vulnerabilities
webapps php

CWH Underground Benja CMS 0.1 - '/admin/admin_edit_topmenu.php' Cross-Site Scripting
webapps php CVE-2008-2987;OSVDB-46735

CWH Underground Benja CMS 0.1 - '/admin/admin_new_submenu.php' Cross-Site Scripting
webapps php CVE-2008-2987;OSVDB-46734