S@BUN Joomla! / Mambo Component com_smslist - 'listid' SQL Injection
webapps php

Alexandr Polyakov Dokeos 1.8.4 - '/main/create_course/add_course.php?tutor_name' SQL Injection
webapps php CVE-2008-0850;OSVDB-42236

Alexandr Polyakov Dokeos 1.8.4 - '/main/mySpace/index.php?tracking_list_coaches_column' SQL Injection
webapps php CVE-2008-0850;OSVDB-42235

Alexandr Polyakov Dokeos 1.8.4 - '/main/admin/session_list.php?cmessage' Cross-Site Scripting
webapps php CVE-2008-0851;OSVDB-41706

Alexandr Polyakov Dokeos 1.8.4 - '/main/admin/course_category.php?category' Cross-Site Scripting
webapps php CVE-2008-0851;OSVDB-41705

Alexandr Polyakov Dokeos 1.8.4 - '/main/calendar/myagenda.php?courseCode' Cross-Site Scripting
webapps php CVE-2008-0851;OSVDB-41704

Alexandr Polyakov Dokeos 1.8.4 - 'main/inc/lib/events.lib.inc.php' Referer HTTP Header SQL Injection
webapps php CVE-2008-0850;OSVDB-41701

Alexandr Polyakov Dokeos 1.8.4 - 'whoisonline.php?id' SQL Injection
webapps php CVE-2008-0850;OSVDB-41700

Don Mambo Component Quran 1.1 - 'surano' SQL Injection
webapps php OSVDB-41746;CVE-2008-0832

S@BUN WordPress Plugin Simple Forum 1.10 < 1.11 - SQL Injection
webapps php

S@BUN WordPress Plugin Simple Forum 2.0 < 2.1 - SQL Injection
webapps php

muuratsalo PlutoStatus Locator 1.0pre alpha - 'index.php' Local File Inclusion
webapps php CVE-2008-0819;OSVDB-42185

muuratsalo artmedic webdesign weblog - Multiple Local File Inclusions
webapps php

Xar PHP Live! 3.2.2 - 'questid' SQL Injection (1)
webapps php OSVDB-42186;CVE-2008-0821

MhZ91 freePHPgallery 0.6 - Cookie Local File Inclusion
webapps php OSVDB-41589;CVE-2008-0818;OSVDB-41588;OSVDB-41587

muuratsalo Scribe 0.2 - 'index.php' Local File Inclusion
webapps php OSVDB-42225;CVE-2008-0822