Abhishek Lyall Digital Music Pad 8.2.3.4.8 - '.pls' Local Overflow (SEH)
local windows

kalashnikov DGNews 2.1 - SQL Injection
webapps php

AnGrY BoY Siteframe CMS 3.2.3 - 'user.php' SQL Injection
webapps php

BraniX QuickTime Picture Viewer 7.6.6 JP2000 - Denial of Service
dos windows

Ali Raheem PiXie CMS 1.04 - Multiple Cross-Site Request Forgery Vulnerabilities
webapps php

hiphop LoveCMS 1.6.2 - Cross-Site Request Forgery / Code Injection
webapps php

hiphop PHP-AddressBook 6.2.4 - 'group.php' SQL Injection
webapps php OSVDB-70219

errnick qwe DzTube - SQL Injection
webapps php

High-Tech Bridge SA kaibb 1.0.1 - Multiple Vulnerabilities
webapps php OSVDB-70211;OSVDB-70210

BraniX IrfanView 4.27 - 'JP2000.dll' plugin Denial of Service
dos windows

Net.Edit0r News Script PHP Pro - 'FCKeditor' Arbitrary File Upload
webapps php

Craig Heffner DD-WRT 24-preSP2 - Information Disclosure
remote hardware OSVDB-70230

n0n0x ardeaCore 2.25 - PHP Framework Remote File Inclusion
webapps php

waraxe Coppermine Photo Gallery 1.5.10 - 'searchnew.php' Cross-Site Scripting
webapps php CVE-2010-4693;OSVDB-70174

waraxe Coppermine Photo Gallery 1.5.10 - 'help.php' Cross-Site Scripting
webapps php CVE-2010-4693;OSVDB-70173

non customers HotWeb Scripts HotWeb Rentals - 'PageId' SQL Injection
webapps php