snakespc MusicBox 2.3.8 - 'viewalbums.php' SQL Injection
webapps php OSVDB-44833;CVE-2008-2125

XenoMuta No-IP DUC 2.1.7 - Remote Code Execution
remote linux OSVDB-50554;CVE-2008-5297;OSVDB-49927

Adrian _pagvac_ Pastor CUPS 1.3.7 - Cross-Site Request Forgery (Add RSS Subscription) Remote Crash
dos linux OSVDB-50351;CVE-2008-5183

d3v1l BoutikOne CMS - 'search_query' Cross-Site Scripting
webapps php CVE-2008-5126;OSVDB-49905

G4N0K VideoScript 4.0.1.50 - Change Admin Password
webapps php OSVDB-49885;CVE-2008-5219

eek Ultrastats 0.2.144/0.3.11 - 'serverid' SQL Injection
webapps php OSVDB-49910;CVE-2008-6260

Hussin X SaturnCMS - Blind SQL Injection
webapps php OSVDB-49913;CVE-2008-6263;OSVDB-49912;CVE-2008-6262

d3b4g Simple Customer 1.2 - Authentication Bypass
webapps php OSVDB-49916;CVE-2008-6332;CVE-2008-6326

Nine:Situations:Group Exodus 0.10 - URI Handler Arbitrary Parameter Injection (1)
remote windows OSVDB-49888;CVE-2008-6937;CVE-2008-6936;CVE-2008-6935

ZoRLu Jadu Galaxies - 'categoryId' Blind SQL Injection
webapps php OSVDB-49908;CVE-2008-6254

ahmadbady PHPfan 3.3.4 - 'init.php' Remote File Inclusion
webapps php OSVDB-49935;CVE-2008-6251

Zigma Chilkat Socket ActiveX 2.3.1.1 - Arbitrary File Creation
remote windows OSVDB-49902;CVE-2008-6959

Bl@ckbe@rD Q-Shop 3.0 - Cross-Site Scripting / SQL Injection
webapps asp OSVDB-50173;CVE-2008-6259;OSVDB-50169;CVE-2008-6258

cOndemned FREEze Greetings 1.0 - Remote Password Retrieve
webapps php OSVDB-49883;CVE-2008-5218

Hussin X E-topbiz ADManager 4 - 'group' Blind SQL Injection
webapps php OSVDB-49917;CVE-2008-6261

StAkeR OpenASP 3.0 - Blind SQL Injection
webapps asp OSVDB-49914;CVE-2008-6257