Hasadya Raed PHPBB2 - 'Admin_Ug_Auth.php' Administrative Bypass
webapps php

r00t Audins Audiens 3.3 - '/system/index.php?Cookie PHPSESSID' SQL Injection
webapps php CVE-2007-1242;OSVDB-34631

r00t Audins Audiens 3.3 - 'setup.php?PATH_INFO' Cross-Site Scripting
webapps php CVE-2007-1241;OSVDB-35994

r00t Audins Audiens 3.3 - 'unistall.php' Authentication Bypass
webapps php CVE-2007-1243;OSVDB-33792

Simon Bonnard SQLiteManager 1.2 - Local File Inclusion
webapps php CVE-2007-1232;OSVDB-33801

Hasadya Raed SolarPay - 'index.php' Local File Inclusion
webapps php CVE-2006-7099;OSVDB-34693

burncycle STWC-Counter 3.4.0 - 'downloadcounter.php' Remote File Inclusion
webapps php OSVDB-33777;CVE-2007-1233

GoLd_M PHP-MIP 0.1 - 'top.php?laypath' Remote File Inclusion
webapps php OSVDB-36881;CVE-2007-1104

r00t Docebo CMS 3.0.x - '/modules/htmlframechat/index.php' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2007-1240;OSVDB-35996

r00t Docebo CMS 3.0.x - 'index.php?searchkey' Cross-Site Scripting
webapps php CVE-2007-1240;OSVDB-35995

Simon Bonnard PhotoStand 1.2 - 'index.php' Cross-Site Scripting
webapps php CVE-2007-1101;OSVDB-33773

Simon Bonnard Active Calendar 1.2 - '/data/mysqlevents.php?css' Cross-Site Scripting
webapps php CVE-2007-1111;OSVDB-33147

Simon Bonnard Active Calendar 1.2 - '/data/y_3.php?css' Cross-Site Scripting
webapps php CVE-2007-1111;OSVDB-33153

Simon Bonnard Active Calendar 1.2 - '/data/y_2.php?css' Cross-Site Scripting
webapps php CVE-2007-1111;OSVDB-33152

Simon Bonnard Active Calendar 1.2 - '/data/m_4.php?css' Cross-Site Scripting
webapps php CVE-2007-1111;OSVDB-33150

Simon Bonnard Active Calendar 1.2 - '/data/m_3.php?css' Cross-Site Scripting
webapps php CVE-2007-1111;OSVDB-33149