Cyber-Crystal Peel Shopping 2.8/ 2.9 - Cross-Site Scripting / SQL Injections
webapps php OSVDB-82328;OSVDB-82327;OSVDB-82325;CVE-2012-5227;CVE-2012-5226

Craig Freyman Sysax Multi Server 5.50 - Create Folder Remote Code Execution Buffer Overflow (Metasploit)
remote windows OSVDB-82329;CVE-2012-6530

Cyber-Crystal phpList 2.10.9 - Cross-Site Request Forgery / Cross-Site Scripting
webapps php OSVDB-78549;OSVDB-78548;CVE-2012-5228;CVE-2012-4247;CVE-2012-4246;CVE-2011-1682;CVE-2011-0748;OSVDB-71683

Cyber-Crystal VR GPub 4.0 - Cross-Site Request Forgery
webapps php OSVDB-78552;CVE-2012-5005

PacketiK vBadvanced CMPS 3.2.2 - 'vba_cmps_include_bottom.php' Remote File Inclusion
webapps php CVE-2012-5224;OSVDB-85995

High-Tech Bridge SA DClassifieds 0.1 final - Cross-Site Request Forgery
webapps php CVE-2012-0990;OSVDB-78557

High-Tech Bridge SA OSClass 2.3.3 - 'index.php?getParam()' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2012-0974;OSVDB-78503

High-Tech Bridge SA OSClass 2.3.3 - 'index.php?sCategory' SQL Injection
webapps php CVE-2012-0973;OSVDB-78504

Trustwave's SpiderLabs WordPress Core 3.3.1 - Multiple Vulnerabilities
webapps php OSVDB-78710;OSVDB-78709;OSVDB-78708;OSVDB-78707;CVE-2012-0937;CVE-2012-0782;CVE-2011-4899;CVE-2011-4898

Robert Cooper Joomla! Component JE Story Submit - 'index.php' Arbitrary File Upload
webapps php

Robert Cooper Ultimate Locator - 'radius' SQL Injection
webapps php

KedAns-Dz UltraPlayer 2.112 - '.avi' File Denial of Service
dos windows

KedAns-Dz glFusion 1.x - SQL Injection
webapps php

H4ckCity Security Team WordPress Plugin YouSayToo auto-publishing 1.0 - 'submit' Cross-Site Scripting
webapps php CVE-2012-0901;OSVDB-78615

Jacob Holcomb stoneware webnetwork6 - Multiple Vulnerabilities
webapps jsp CVE-2012-0286;OSVDB-78524;OSVDB-78523;OSVDB-78522;OSVDB-78521;CVE-2012-0285

CoBRa_21 Joomla! Component com_xball - 'team_id' SQL Injection
webapps php