r0ut3r Redaction System 1.0 - 'lang_prefix' Remote File Inclusion
webapps php OSVDB-29704;CVE-2006-5302;OSVDB-29703;OSVDB-29702;OSVDB-29701;OSVDB-29700

Kw3[R]Ln MiniBB keyword_replacer 1.0 - 'pathToFiles' File Inclusion
webapps php OSVDB-29709;CVE-2006-7156

v1per-haCker Download-Engine 1.4.2 - 'spaw' Remote File Inclusion
webapps php OSVDB-30797;CVE-2006-5291;CVE-2006-4656

viper-haCker Dokeos 1.6.4 - Multiple Remote File Inclusions Vulnerabilities
webapps php OSVDB-83581

DeatH VirUs Gcards 1.13 - 'Addnews.php' Remote File Inclusion
webapps php

v1per-haCker SH-News 3.1 - 'scriptpath' Remote File Inclusion
webapps php OSVDB-29678;CVE-2006-5282;OSVDB-29677;OSVDB-29676;OSVDB-29675;OSVDB-29674

Crackers_Child MySQLDumper 1.21 - 'sql.php' Cross-Site Scripting
webapps php

DarkFig Album Photo Sans Nom 1.6 - 'Getimg.php' Remote File Inclusion
webapps php

Vicente Aguilera Diaz Hastymail 1.x - IMAP SMTP Command Injection
webapps php CVE-2006-5262;OSVDB-29564

Kacper Exhibit Engine 1.5 RC 4 - 'photo_comment.php' File Inclusion
webapps php OSVDB-34031;CVE-2006-5292

DarkFig Album Photo Sans Nom 1.6 - Remote Source Disclosure
webapps php OSVDB-29673;CVE-2006-5320

DarkFig Foafgen 0.3 - 'redir.php' Local Source Disclosure
webapps php OSVDB-29669;CVE-2006-5319

DarkFig JASmine 0.0.2 - 'index.php' Remote File Inclusion
webapps php OSVDB-29668;CVE-2006-5318

DarkFig eboli - 'index.php' Remote File Inclusion
webapps php OSVDB-30866;CVE-2006-5317

DarkFig compteur 2.0 - 'param_editor.php' Remote File Inclusion
webapps php OSVDB-29617;CVE-2006-5259

DarkFig registroTL - 'main.php' Remote File Inclusion
webapps php OSVDB-30865;CVE-2006-5316;OSVDB-30864;CVE-2006-5315