R00T3RR0R Oxynews - 'index.php' SQL Injection
webapps php CVE-2006-1271;OSVDB-23940

Soot Contrexx CMS 1.0.x - 'index.php' Cross-Site Scripting
webapps php

Aliaksandr Hartsuyeu DSDownload 1.0 - Multiple SQL Injections
webapps php CVE-2006-1232;OSVDB-23887

uid0 KnowledgebasePublisher 1.2 - 'Include' Remote Code Execution
webapps php

rgod PHP iCalendar 2.21 - 'publish.ical.php' Remote Code Execution
webapps php OSVDB-24031;CVE-2006-1291

rgod PHP iCalendar 2.21 - 'cookie' Remote Code Execution
webapps php OSVDB-24030;CVE-2006-1292

Aliaksandr Hartsuyeu DSCounter 1.2 - 'index.php' SQL Injection
webapps php CVE-2006-1234;OSVDB-23882

Aliaksandr Hartsuyeu CyBoards PHP Lite 1.21/1.25 - 'post.php' SQL Injection
webapps php

Aliaksandr Hartsuyeu Vegas Forum 1.0 - 'Forumlib.php' SQL Injection
webapps php

rgod Simple PHP Blog 0.4.7.1 - Remote Command Execution
webapps php OSVDB-24005;CVE-2006-1243

black-code vCard 2.9 - Multiple Cross-Site Scripting Vulnerabilities
webapps php

Linux_Drox vCard 2.8/2.9 - 'create.php' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2006-1230;OSVDB-23838

Nomenumbra Jupiter CMS 1.1.5 - Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2006-1223

rgod Guestbook Script 1.7 - 'include_files' Remote Code Execution
webapps php

R00T3RR0R WMNews - 'wmcomments.php?ArtID' Cross-Site Scripting
webapps php CVE-2006-1233;OSVDB-23842

R00T3RR0R WMNews - 'footer.php?ctrrowcol' Cross-Site Scripting
webapps php CVE-2006-1233;OSVDB-23841