ddoshomo PHP-Nuke 7.9 Final - 'phpbb_root_path' Remote File Inclusions
webapps php OSVDB-31776;CVE-2006-2828

Kacper Informium 0.12.0 - 'common-menu.php' Remote File Inclusion
webapps php OSVDB-25988;CVE-2006-2818

Kacper ashNews 0.83 - 'pathtoashnews' Remote File Inclusion
webapps php OSVDB-26609;CVE-2003-1292;OSVDB-22912

Kacper Igloo 0.1.9 - 'Wiki.php' Remote File Inclusion
webapps php OSVDB-31051;CVE-2006-2819

beford Redaxo 3.2 - 'INCLUDE_PATH' Remote File Inclusion
webapps php OSVDB-25960;CVE-2006-2845;OSVDB-25959;OSVDB-25958;CVE-2006-2844;OSVDB-25957;CVE-2006-2843;OSVDB-25956;OSVDB-25955

MazaGi SiteBuilder-FX - 'top.php' Remote File Inclusion
webapps php CVE-2006-3395;OSVDB-26959

SpC-x Abarcar Realty Portal 5.1.5 - 'content.php' SQL Injection
webapps php CVE-2006-2853;OSVDB-26226

SpC-x Tekno.Portal - 'Bolum.php' SQL Injection
webapps php CVE-2006-2817;OSVDB-26225

beford Bytehoard 2.1 - 'server.php' Remote File Inclusion
webapps php OSVDB-25948;CVE-2006-2849

ajann aspWebLinks 2.0 - SQL Injection / Admin Pass Change
webapps asp OSVDB-31040;CVE-2006-2848;OSVDB-25962;CVE-2006-2847

Kacper AssoCIateD CMS 1.1.3 - 'ROOT_PATH' Remote File Inclusion
webapps php OSVDB-26150;CVE-2006-2841;OSVDB-26149;OSVDB-26148;OSVDB-26147;OSVDB-26146

Hessam-x TinyPHP Forum 3.6 - 'profile.php' Remote Code Execution
webapps php OSVDB-26655;CVE-2006-7063

SpC-x vBulletin 3.0.10 - 'Portal.php' SQL Injection
webapps php CVE-2006-2805;OSVDB-31648

Sweet osTicket 1.x - 'Open_form.php' Remote File Inclusion
webapps php

darkgod PHPMyDesktop/Arcade 1.0 - 'index.php' Local File Inclusion
webapps php CVE-2006-2747;OSVDB-25934

Jokubas ToendaCMS 0.7 - 'index.php' Cross-Site Scripting
webapps php