R3d-D3V!L Active Test 2.1 - Authentication Bypass
webapps asp OSVDB-50408;CVE-2008-5959

R3d-D3V!L ActiveVotes 2.2 - Authentication Bypass
webapps asp OSVDB-50491;CVE-2008-5633

R3d-D3V!L ASPReferral 5.3 - 'AccountID' Blind SQL Injection
webapps asp OSVDB-50379;CVE-2008-6889

R3d-D3V!L Active Force Matrix 2 - Authentication Bypass
webapps asp OSVDB-50490;CVE-2008-5634;OSVDB-50489;CVE-2008-5632

Charalambous Glafkos RakhiSoftware Shopping Cart - PHPSESSID Cookie Manipulation Full Path Disclosure
webapps php CVE-2008-6279;OSVDB-50325

Charalambous Glafkos RakhiSoftware Shopping Cart - 'product.php' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2008-6278;OSVDB-50326

Stack Ocean12 FAQ Manager Pro - 'ID' Blind SQL Injection
webapps php OSVDB-50387;CVE-2008-6372

R3d-D3V!L ReVou Twitter Clone - Authentication Bypass
webapps php OSVDB-57465;CVE-2008-7083

CWH Underground CMS little 0.0.1 - 'term' SQL Injection
webapps php OSVDB-50836;CVE-2008-5628

The_5p3ctrum Bluo CMS 1.2 - Blind SQL Injection
webapps php OSVDB-50381;CVE-2008-6281

JIKO SailPlanner 0.3a - Authentication Bypass
webapps php OSVDB-57400;CVE-2008-7077

StAkeR All Club CMS 0.0.2 - Remote Database Configuration Retrieve
webapps php OSVDB-57358;CVE-2008-7069

Bl@ckbe@rD Web Calendar System 3.40 - Cross-Site Scripting / SQL Injection
webapps php

Abysssec Apache Tomcat (Windows) - 'runtime.getRuntime().exec()' Local Privilege Escalation
local windows

MrDoug Booking Centre 2.01 - Authentication Bypass
webapps php OSVDB-54619;CVE-2008-6810

Praveen Darshanam Microsoft Office - Communicator 'SIP' Remote Denial of Service
dos windows OSVDB-50320;CVE-2008-5180