X0r_1 phpCommunityCalendar 4.0.3 - Cross-Site Scripting / SQL Injection
webapps php OSVDB-31693;CVE-2006-2798;OSVDB-31692;OSVDB-31691;OSVDB-31066;OSVDB-31065;OSVDB-31064;OSVDB-31063;OSVDB-31062;CVE-2006-2797;OSVDB-31061;OSVDB-31060

Kacper Docebo 3.0.3 - Multiple Remote File Inclusions
webapps php OSVDB-25757;CVE-2006-2577;CVE-2006-2576

rgod Nucleus CMS 3.22 - 'DIR_LIBS' Remote File Inclusion
webapps php OSVDB-25749;CVE-2006-2583

V4mu UBBCentral UBB.Threads 6.4.x < 6.5.2 - 'thispath' Remote File Inclusion
webapps php OSVDB-25714;CVE-2006-2568

X0r_1 Fusion News 1.0 (fil_config) - Remote File Inclusion
webapps php OSVDB-34450;CVE-2006-3387

rgod XOOPS 2.0.13.2 - 'xoopsOption[nocommon]' Remote Command Execution
webapps php OSVDB-25683;CVE-2006-2516

666 Woltlab Burning Board 2.3.5 - 'links.php' SQL Injection
webapps php OSVDB-25751;CVE-2006-2569

Kacper CaLogic Calendars 1.2.2 - 'CLPath' Remote File Inclusion
webapps php OSVDB-31614;CVE-2006-2570;OSVDB-31613

C.Schmitz Artmedic NewsLetter 4.1 - 'Log.php' Remote Script Execution
webapps php CVE-2006-2608;OSVDB-25709

Luny JemWeb DownloadControl 1.0 - 'DC.php' SQL Injection
webapps php CVE-2006-2552;OSVDB-25716

omnipresent CodeAvalanche News 1.2 - 'default.asp' SQL Injection
webapps asp CVE-2006-2499;OSVDB-25652

OLiBekaS phpMyDirectory 10.4.4 - 'ROOT_PATH' Remote File Inclusion
webapps php OSVDB-25698;CVE-2006-2521

FarhadKey Zix Forum 1.12 - 'layid' SQL Injection
webapps asp OSVDB-25707;CVE-2006-2541

[Oo] phpListPro 2.0.1 - 'Language' Remote Code Execution
webapps php OSVDB-25694;CVE-2006-2523

[Oo] phpBazar 2.1.0 - Remote File Inclusion / Authentication Bypass
webapps php OSVDB-25701;CVE-2006-2528;OSVDB-25700;CVE-2006-2527

TeufeL ASPBB 0.5.2 - 'profile.asp?get' Cross-Site Scripting
webapps asp CVE-2006-2497;OSVDB-25651