rgod CuteNews 1.4.1 - Shell Injection / Remote Command Execution
webapps php OSVDB-60781;CVE-2009-4115;OSVDB-51386

retrogod@aliceposta.it CuteNews 1.4.1 - 'template' Traversal Arbitrary File Access
webapps php CVE-2005-3507;OSVDB-20473

retrogod@aliceposta.it CuteNews 1.4.1 - 'show_archives.php' Traversal Arbitrary File Access
webapps php CVE-2005-3507;OSVDB-20472

enji@infosys.tuwien.ac.at Simple PHP Blog 0.4 - 'colors.php' Multiple Cross-Site Scripting Vulnerabilities
webapps cgi CVE-2005-3473;OSVDB-20438

enji@infosys.tuwien.ac.at Simple PHP Blog 0.4 - 'preview_static_cgi.php' Multiple Cross-Site Scripting Vulnerabilities
webapps cgi CVE-2005-3473;OSVDB-20437

enji@infosys.tuwien.ac.at Simple PHP Blog 0.4 - 'preview_cgi.php' Multiple Cross-Site Scripting Vulnerabilities
webapps cgi CVE-2005-3473;OSVDB-20436

Linux_Drox PHPWebThings 0.4.4 - 'forum.php' Cross-Site Scripting
webapps php CVE-2005-3584;OSVDB-20721

Mousehack News2Net 3.0 - 'index.php' SQL Injection
webapps php CVE-2005-3469;OSVDB-20450

Devil-00 VuBB Forum RC1 - 'm' SQL Injection
webapps php

almaster XMB Forum 1.9.3 - 'post.php' SQL Injection
webapps php

Alireza Hassani VUBB - 'index.php' Cross-Site Scripting
webapps php CVE-2005-3512;OSVDB-20771

gladiator Elite Forum 1.0 - HTML Injection
webapps php CVE-2005-3412;OSVDB-20418

almaster Belchior Foundry vCard Pro 3.1 - 'Addrbook.php' SQL Injection
webapps php CVE-2005-4769;OSVDB-26547

p0w3r phpMyAdmin 2.7 - 'sql.php' Cross-Site Scripting
webapps php CVE-2006-1803;OSVDB-24641

_6mO_HaCk Comersus Backoffice 4.x/5.0/6.0 - '/comersus/database/comersus.mdb' Direct Request Database Disclosure
webapps asp OSVDB-49507

_6mO_HaCk Comersus Backoffice 4.x/5.0/6.0 - 'comersus_Backoffice_supportError.asp?error' Cross-Site Scripting
webapps asp CVE-2005-3397;OSVDB-22673