lorenzo Aztek Forum 4.00 - Cross-Site Scripting / SQL Injection
webapps php OSVDB-23612;CVE-2006-1112;OSVDB-23611;CVE-2006-1111;OSVDB-23610;CVE-2006-1110

cijfer phpRPC Library 0.7 - XML Data Decoding Remote Code Execution (2)
webapps php

botan SMBlog 1.2 - Arbitrary PHP Command Execution
webapps php CVE-2006-1013;OSVDB-23807

nukedx Woltlab Burning Board 2.x - Datenbank MOD 'fileid' SQL Injection
webapps php OSVDB-23808;CVE-2006-1094

KingOfSka vuBB 0.2 Final - 'cookie' SQL Injection
webapps php OSVDB-23587;CVE-2006-0962

LorD phpRPC Library 0.7 - XML Data Decoding Remote Code Execution (1)
webapps php OSVDB-23514;CVE-2006-1032

str0ke Limbo CMS 1.0.4.2 - 'itemID' Remote Code Execution
webapps php OSVDB-23699;CVE-2006-1662

Yunus Emre Yilmaz PEHEPE Membership Management System 3.0 - Remote PHP Script Code Injection
webapps php CVE-2006-1022;OSVDB-23567

Crashfr Mozilla Thunderbird 1.5 - Multiple Remote Information Disclosure Vulnerabilities
webapps php CVE-2006-1045;OSVDB-24681

Yunus Emre Yilmaz EJ3 TOPo 2.2.178 - 'Inc_header.php' Cross-Site Scripting
webapps php CVE-2006-0984;OSVDB-23541

Dr^Death QwikiWiki 1.4 - 'index.php' Cross-Site Scripting
webapps php CVE-2006-0983;OSVDB-23700

Devil-00 MyBulletinBoard (MyBB) 1.03 - 'misc.php' SQL Injection
webapps php OSVDB-23554;CVE-2006-0959

Hessam-x Farsinews 2.5 - Directory Traversal Arbitrary 'users.db' Access
webapps php OSVDB-23021;CVE-2006-0660

Liz0ziM n8cms 1.1/1.2 - 'mailto.php?userid' Cross-Site Scripting
webapps php CVE-2006-1008;OSVDB-23553

Liz0ziM n8cms 1.1/1.2 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2006-1008;OSVDB-23552

Liz0ziM n8cms 1.1/1.2 - 'index.php' Multiple SQL Injections
webapps php CVE-2006-1007;OSVDB-23551