cize0f KKE Info Media Kmita Gallery - Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2008-5068;OSVDB-49445;OSVDB-49444

cize0f KKE Info Media Kmita Catalogue 2 - 'search.php' Cross-Site Scripting
webapps php CVE-2008-5067;OSVDB-49441

DaRkLiFe Agares ThemeSiteScript 1.0 - 'loadadminpage' Remote File Inclusion
webapps php OSVDB-49856;CVE-2008-5066

Alfons Luja vicFTP 5.0 - 'LIST' Remote Denial of Service
dos windows OSVDB-44608;CVE-2008-6829;CVE-2008-2031

0xFFFFFF phpdaily - SQL Injection / Cross-Site Scripting / Local File Download
webapps php OSVDB-49396;CVE-2008-4758;OSVDB-49395;CVE-2008-4757;OSVDB-49394;CVE-2008-4756;OSVDB-49393;OSVDB-49392;OSVDB-49391

fl0 fl0w TugZip 3.00 Archiver - '.zip' Local Buffer Overflow
local windows OSVDB-49371;CVE-2008-4779

GulfTech Security WebSVN 2.0 - Cross-Site Scripting / File Handling / Code Execution
webapps php OSVDB-51541;CVE-2008-5920;OSVDB-49245;CVE-2008-5919;OSVDB-49244;CVE-2008-5918;GTSA-00124

Aviv Raff Opera 9.52/9.60 - Persistent Cross-Site Scripting Code Execution
remote windows

syst3m_f4ult DorsaCMS - 'ShowPage.aspx' SQL Injection
webapps asp OSVDB-49268

Flavio D. Garcia NXP Semiconductors MIFARE Classic Smartcard - Multiple Vulnerabilities
local multiple

Five-Three-Nine WBB Plugin rGallery 1.09 - 'itemID' Blind SQL Injection
webapps php OSVDB-49206;CVE-2008-4627

Federico L. Bossi Bonin Solaris 9 PortBind - XDR-DECODE 'taddr2uaddr()' Remote Denial of Service
dos solaris OSVDB-49474;CVE-2008-4619

faithlove Habari 0.5.1 - 'habari_username' Cross-Site Scripting
webapps php CVE-2008-4601;OSVDB-49203

DaRkLiFe PokerMax Poker League 0.13 - Insecure Cookie Handling
webapps php OSVDB-49153;CVE-2008-4600

0xFFFFFF CafeEngine - Multiple SQL Injections
webapps php OSVDB-49202;CVE-2008-4605;OSVDB-49160;CVE-2008-4604;OSVDB-49159

faithlove Elxis CMS 2008.1 - PHPSESSID Variable Session Fixation
webapps php CVE-2008-4649;OSVDB-49264