CWH Underground Basic-CMS - Blind SQL Injection
webapps php OSVDB-50383

Stack Basic-CMS - Remote Database Disclosure
webapps php

CWH Underground AssoCIateD 1.4.4 - 'menu' Cross-Site Scripting
webapps php CVE-2006-3151;OSVDB-26672

David Gil Linksys WRT160N - 'apply.cgi' Cross-Site Scripting
remote hardware CVE-2008-6280;OSVDB-50368

Bl@ckbe@rD Comersus ASP Shopping Cart - File Disclosure / Cross-Site Scripting
webapps asp OSVDB-8283;OSVDB-29160

Stack Ocean12 FAQ Manager Pro - Database Disclosure
webapps php OSVDB-57360;CVE-2008-7063

The_5p3ctrum Turnkey Arcade Script - SQL Injection (1)
webapps php OSVDB-50315;CVE-2009-3973;CVE-2008-5629

NoGe pagetree CMS 0.0.2 Beta 0001 - Remote File Inclusion
webapps php OSVDB-57359;CVE-2008-7067

Cyber-Zone Ocean12 Membership Manager Pro - Authentication Bypass
webapps php OSVDB-50318;CVE-2008-6390;CVE-2008-6371

R3d-D3V!L Booking Centre 2.01 - 'HotelID' SQL Injection
webapps php OSVDB-54620;CVE-2008-6809

Cyber-Zone Web Calendar 4.1 - Authentication Bypass
webapps php

ZoRLu Star Articles 6.0 - Arbitrary File Upload
webapps php OSVDB-50459;CVE-2008-7076

XaDoS RakhiSoftware Shopping Cart - SQL Injection
webapps php OSVDB-50313;CVE-2008-6277

Alfons Luja i.Scribe SMTP Client 2.00b - 'wscanf' Remote Format String (PoC)
dos windows OSVDB-50232;CVE-2008-7074

The_5p3ctrum Family Project 2.x - Authentication Bypass
webapps php OSVDB-50314;CVE-2008-6274

Pouya_Server Ocean12 Calendar Manager Gold - Database Disclosure
webapps php