Hussin X HotScripts Clone - 'cid' SQL Injection
webapps php OSVDB-52398;CVE-2008-6405

GeNiUs IrAQI InterTech WCMS - 'etemplate.php' SQL Injection
webapps php OSVDB-48498

AlbaniaN-[H] Omnicom Content Platform - 'browser.asp' Directory Traversal
webapps asp CVE-2008-5997;OSVDB-52166

Hadi Kiamarsi Datalife Engine CMS 7.2 - 'admin.php' Cross-Site Scripting
webapps php CVE-2008-6406;OSVDB-48502

GoLd_M WebPortal CMS 0.7.4 - 'code' Remote Code Execution
webapps php

dun Ol BookMarks Manager 0.7.5 - Local File Inclusion
webapps php OSVDB-52394;CVE-2008-6410;OSVDB-48505

d3v1l JETIK-WEB Software - 'kat' SQL Injection
webapps php OSVDB-48518;CVE-2008-6401

GoLd_M Galmeta Post CMS 0.2 - Remote Code Execution / Arbitrary File Upload
webapps php

StAkeR iGaming CMS 1.5 - Multiple SQL Injections
webapps php OSVDB-51156;CVE-2008-5841;OSVDB-51155;OSVDB-51154

dun Sofi WebGui 0.6.3 PRE - 'mod_dir' Remote File Inclusion
webapps php OSVDB-52401;CVE-2008-6402

dun OpenRat 0.8-beta4 - 'tpl_dir' Remote File Inclusion
webapps php OSVDB-52400;CVE-2008-6403

shinnai Chilkat XML - ActiveX Arbitrary File Creation/Execution
remote windows OSVDB-48448;CVE-2008-4343

Karar Alshami 6rbScript - 'cat.php' SQL Injection
webapps php CVE-2008-4344;OSVDB-48673

David Vieira-Kurz BLUEPAGE CMS 2.5 - 'PHPSESSID' Session Fixation
webapps php CVE-2008-6039;OSVDB-52191

David Vieira-Kurz xt:Commerce 3.04 - 'XTCsid' Session Fixation
webapps php CVE-2008-6045;OSVDB-55649

David Vieira-Kurz xt:Commerce 3.04 - 'advanced_search_result.php?keywords' Cross-Site Scripting
webapps php CVE-2008-6044;OSVDB-55648