Lostmon E-Xoops 1.0.5/1.0.8 - '/mydownloads/ratefile.php?lid' SQL Injection
webapps php CVE-2007-6380;OSVDB-43680

Lostmon E-Xoops 1.0.5/1.0.8 - '/adresses/ratefile.php?lid' SQL Injection
webapps php CVE-2007-6380;OSVDB-43679

Lostmon E-Xoops 1.0.5/1.0.8 - '/mylinks/ratelink.php?lid' SQL Injection
webapps php CVE-2007-6380;OSVDB-43681

Mormoroth bttlxe Forum 2.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
webapps asp

Tomas Kuliavas SquirrelMail G/PGP Encryption Plugin 2.0/2.1 - Access Validation / Input Validation
webapps php

Brainhead webSPELL 4.1.2 - 'calendar.php' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2007-6309;OSVDB-39169

Brainhead webSPELL 4.1.2 - 'usergallery.php?galleryID' Cross-Site Scripting
webapps php CVE-2007-6309;OSVDB-39168

v0l4arrra MonAlbum 0.87 - Arbitrary File Upload / Password Grabber
webapps php

MhZ91 falcon CMS 1.4.3 - Remote File Inclusion / Cross-Site Scripting
webapps php OSVDB-40988;CVE-2007-6490;OSVDB-40987;OSVDB-40986;CVE-2007-6489;OSVDB-40985;CVE-2007-6488

H-Security Labs Falt4 CMS rc4 10.9.2007 - Multiple Vulnerabilities
webapps php OSVDB-39184;CVE-2007-6311;OSVDB-39183;OSVDB-39182;CVE-2007-6310

Aria-Security Team Lotfian.com DATABASE DRIVEN TRAVEL SITE - SQL Injection
webapps php OSVDB-52880;OSVDB-52879;OSVDB-52877

KAWASHIMA Takahiro Flyspray 0.9.9 - Multiple Cross-Site Scripting Vulnerabilities
webapps php

hadihadi SH-News 3.0 - 'comments.php' SQL Injection
webapps php OSVDB-39502;CVE-2007-6391

t0pP8uZz DWdirectory 2.1 - SQL Injection
webapps php OSVDB-39113;CVE-2007-6392

t0pP8uZz Ace Image Hosting Script - 'id' SQL Injection
webapps php OSVDB-39115;CVE-2007-6393

S.W.A.T. Content Injector 1.53 - 'index.php' SQL Injection
webapps php OSVDB-39111;CVE-2007-6394