RST/GHC SetCMS 3.6.5 - Remote Command Execution
webapps php OSVDB-40919;CVE-2008-0478

RST/GHC Coppermine Photo Gallery 1.4.10 - SQL Injection
webapps php

S@BUN Easysitenetwork Recipe - 'categoryId' SQL Injection
webapps php OSVDB-40927;CVE-2008-0453

shinmai aflog 1.01 - Cross-Site Scripting / SQL Injection
webapps php OSVDB-40471;CVE-2008-0398;OSVDB-40470;OSVDB-40469;CVE-2008-0397

anonymous Small Axe Weblog 0.3.1 - 'ffile' Remote File Inclusion
webapps php

trew Singapore 0.10.1 Modern Template - 'gallery' Cross-Site Scripting
webapps php CVE-2008-0400;OSVDB-40379

WarGame Alice Gate2 Plus Wi-Fi Router - Cross-Site Request Forgery
webapps cgi CVE-2008-7165;OSVDB-40739

Doz MegaBBS 1.5.14b - 'upload.asp' Cross-Site Scripting
webapps asp CVE-2008-0436;OSVDB-40947

nonroot MoinMoin 1.5.x - 'MOIND_ID' Cookie Login Bypass
webapps php OSVDB-41780;CVE-2008-0782

t0pP8uZz Alstrasoft Forum Pay Per Post Exchange 2.0 - SQL Injection
webapps php OSVDB-40936;CVE-2008-0440;OSVDB-40411;CVE-2008-0429

QTRinux Lama Software 14.12.2007 - Multiple Remote File Inclusions
webapps php OSVDB-40448;CVE-2008-0423;OSVDB-40447;OSVDB-40446

MhZ91 IDM-OS 1.0 - 'Filename' File Disclosure
webapps php OSVDB-40472;CVE-2008-0431

shinmai OZJournals 2.1.1 - 'id' File Disclosure
webapps php OSVDB-40474;CVE-2008-0435

Virangar Security BoastMachine 3.1 - 'mail.php' id SQL Injection
webapps php OSVDB-40960;CVE-2008-0422

The_HuliGun Mooseguy Blog System 1.0 - 'month' SQL Injection
webapps php OSVDB-40959;CVE-2008-0424

bazik Coppermine Photo Gallery 1.4.10 - 'cpg1410_xek.php' SQL Injection
webapps php CVE-2008-0504