the_day WebCreator 0.2.6-rc3 - 'moddir' Remote File Inclusion
webapps php OSVDB-35033;CVE-2007-1459;OSVDB-35032;OSVDB-35031

the_day CARE2X 1.1 - 'ROOT_PATH' Remote File Inclusion
webapps php OSVDB-34060;CVE-2007-1458;OSVDB-34059;OSVDB-34058;OSVDB-34057;OSVDB-34056;OSVDB-34055;OSVDB-34054;OSVDB-34052;OSVDB-34051;OSVDB-34050;OSVDB-34049;OSVDB-34048;OSVDB-34047;OSVDB-34046;OSVDB-34045

the_day Activist Mobilization Platform (AMP) 3.2 - Remote File Inclusion
webapps php OSVDB-33745;CVE-2007-1571

WiLdBoY JGBBS 3.0beta1 - 'search.asp?author' SQL Injection
webapps asp OSVDB-34369;CVE-2007-1572;CVE-2007-1440

CyberGhost X-ice News System 1.0 - 'devami.asp?id' SQL Injection
webapps asp OSVDB-34040;CVE-2007-1570;CVE-2007-1438

K-159 MySQL Commander 2.7 - 'home' Remote File Inclusion
webapps php OSVDB-34038;CVE-2007-1439

Dj7xpl GestArt Beta 1 - 'aide.php?aide' Remote File Inclusion
webapps php CVE-2006-5612

RaeD Hasadya ClipShare 1.5.3 - 'ADODB-Connection.Inc.php' Remote File Inclusion
webapps php CVE-2007-1430;OSVDB-34446

BeyazKurt BP Blog 7.0 - 'layout' SQL Injection
webapps asp OSVDB-33997;CVE-2007-1445

K-159 OES (Open Educational System) 0.1beta - Remote File Inclusion
webapps php OSVDB-35029;CVE-2007-1446;OSVDB-35028;OSVDB-35027;OSVDB-35026;OSVDB-35025;OSVDB-35024;OSVDB-35023

cyb3rt & 020 cPanel 10.9.x - 'Fantastico' Local File Inclusion
webapps php OSVDB-35037;CVE-2007-1455;OSVDB-35036

h4ck3r AssetMan 2.4a - 'download_pdf.php' Remote File Disclosure
webapps php OSVDB-35128;CVE-2007-1427

ajann SonicMailer Pro 3.2.3 - 'index.php' SQL Injection
webapps php OSVDB-33986;CVE-2007-1425

ajann Top Auction 1.0 - 'viewcat.php' SQL Injection
webapps php OSVDB-35586;CVE-2005-3952;OSVDB-21107

ajann JobSitePro 1.0 - 'search.php' SQL Injection
webapps php OSVDB-33985;CVE-2007-1428

bd0rk PostNuke Module phgstats 0.5 - 'phgdir' Remote File Inclusion
webapps php CVE-2006-0164