Saif ZenPhoto 1.4.0.3 - x-forwarded-for HTTP Header Persistent Cross-Site Scripting
webapps php OSVDB-71989

Ignacio Garrido 360 Web Manager 3.0 - Multiple Vulnerabilities
webapps php OSVDB-72111;OSVDB-72110;OSVDB-72109

NoNameMT First Escort Marketing CMS - Multiple SQL Injections Vulnerabilities
webapps php

AutoSec Tools LightNEasy 3.2.3 - 'userhandle' Cookie SQL Injection
webapps php

High-Tech Bridge SA ZenPhoto 1.4.0.3 - '_zp_themeroot' Multiple Cross-Site Scripting Vulnerabilities
webapps php

Ashiyane Digital Security Team SyCtel Design - 'menu' Multiple Local File Inclusions
webapps php

Metasploit Spreecommerce < 0.50.0 - Arbitrary Command Execution (Metasploit)
remote unix OSVDB-71900

LiquidWorm Gesytec ElonFmt ActiveX 1.1.14 - 'ElonFmt.ocx' pid Item Buffer Overflow (SEH)
local windows

shinnai Yahoo! CD Player - ActiveX Control 'open()' Method Stack Buffer Overflow
dos windows

Kurd-Team Automagick Tube Script 1.4.4 - 'module' Cross-Site Scripting
webapps php

vir0e5 SocialCMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities
webapps php OSVDB-71930;CVE-2012-1416

LiquidWorm docuFORM Mercury WebApp 6.16a/5.20 - Multiple Cross-Site Scripting Vulnerabilities
webapps php OSVDB-72140;OSVDB-72139;OSVDB-72138;OSVDB-72137

Romka Ultimate eShop - Error-Based SQL Injection
webapps php

QSecure Viola DVR VIO-4/1000 - Multiple Directory Traversal Vulnerabilities
remote linux

High-Tech Bridge SA webSPELL 4.2.2a - Multiple Cross-Site Scripting Vulnerabilities
webapps php

Juan Manuel Garcia Oracle JD Edwards EnterpriseOne 8.9x Tools Web Runtime SEC - '/jde/JASMafletMafBrowserClose.mafService?jdemafjasLinkTarget' Cross-Site Scripting
remote multiple CVE-2011-0836;OSVDB-71917