THE_MILLER Drake CMS 0.4.11 RC8 - 'd_root' Local File Inclusion
webapps php CVE-2008-1371;OSVDB-43329

ZoRLu Gallarific - Multiple Script Direct Request Authentication Bypass
webapps php CVE-2008-1327;OSVDB-43442

ZoRLu Gallarific - 'search.php?query' Cross-Site Scripting
webapps php CVE-2008-1326;OSVDB-43441

meloulisi PHP-Nuke 4nAlbum Module 0.92 - 'pid' SQL Injection
webapps php

Charles Fol phpMyNewsletter 0.8b5 - 'msg_id' SQL Injection
webapps php OSVDB-43404;CVE-2008-1295

Don Mambo Component eWriting 1.2.1 - 'cat' SQL Injection
webapps php OSVDB-42727;CVE-2008-1297

xcorpitx Batchelor Media BM Classifieds - Multiple SQL Injections
webapps php

xcorpitx BM Classifieds 20080409 - Multiple SQL Injections
webapps php OSVDB-42682;CVE-2008-1272;OSVDB-42681

croconile QuickTicket 1.5 - 'qti_usr.php' SQL Injection
webapps php OSVDB-42684;CVE-2007-3539

nnposter Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath.0' Arbitrary File Access
webapps php CVE-2008-1301;OSVDB-42785

nnposter Alkacon OpenCMS 7.0.3 - 'logfileViewSettings.jsp?filePath' Cross-Site Scripting
webapps php CVE-2008-1300;OSVDB-42784

S@BUN Joomla! Component Candle 1.0 - 'cid' SQL Injection
webapps php

ZoRLu Specimen Image Database - 'taxonservice.php?dir' Remote File Inclusion
webapps php CVE-2008-7152;OSVDB-57646

Doz WordPress Core 2.3.2 - '/wp-admin/invites.php?to' Cross-Site Scripting
webapps php CVE-2008-1304;OSVDB-43403

Doz WordPress Core 2.3.2 - '/wp-admin/users.php?inviteemail' Cross-Site Scripting
webapps php CVE-2008-1304;OSVDB-43402

ZoRLu ImageVue 1.7 - 'dirxml.php?path' Cross-Site Scripting
webapps php CVE-2008-1273;OSVDB-42830