Net.Edit0r News Script PHP Pro - 'FCKeditor' Arbitrary File Upload
webapps php

Craig Heffner DD-WRT 24-preSP2 - Information Disclosure
remote hardware OSVDB-70230

n0n0x ardeaCore 2.25 - PHP Framework Remote File Inclusion
webapps php

waraxe Coppermine Photo Gallery 1.5.10 - 'searchnew.php' Cross-Site Scripting
webapps php CVE-2010-4693;OSVDB-70174

waraxe Coppermine Photo Gallery 1.5.10 - 'help.php' Cross-Site Scripting
webapps php CVE-2010-4693;OSVDB-70173

non customers HotWeb Scripts HotWeb Rentals - 'PageId' SQL Injection
webapps php

rgod Microsoft Windows Fax Services Cover Page Editor - '.cov' Memory Corruption
dos windows OSVDB-70126;CVE-2010-4701

Michael Brooks OpenClassifieds 1.7.0.3 - Chained: Captcha Bypass / SQL Injection / Persistent Cross-Site Scripting on FrontPage
webapps php

JohnLeitch Mongoose 2.11 - 'Content-Length' HTTP Header Remote Denial of Service
dos windows

Pouya Daneshmand Sigma Portal - 'ShowObjectPicture.aspx' Denial of Service
dos asp

Ulisses Castro LiveZilla 3.2.0.2 - 'Track' Module 'server.php' Cross-Site Scripting
webapps php CVE-2010-4276;OSVDB-70203

Dr.NeT Pligg CMS 1.1.3 - 'range' SQL Injection
webapps php

Giuseppe D'Inverno Web@all 1.1 - Remote Admin Settings Change
webapps php OSVDB-70128

blake OpenEMR 3.2.0 - SQL Injection / Cross-Site Scripting
webapps php OSVDB-70135;OSVDB-70134;OSVDB-70133;OSVDB-70132;OSVDB-70131;OSVDB-70130;OSVDB-70129

P0C T34M pecio CMS 2.0.5 - Cross-Site Request Forgery (Add Admin)
webapps php

ToXiC CruxCMS 3.0 - Multiple Input Validation Vulnerabilities
webapps php