Stack Easy Photo Gallery 2.1 - Arbitrary Add Admin / remove user
webapps php OSVDB-48317;CVE-2008-4167

Stack PHPWebGallery 1.3.4 - Blind SQL Injection (1)
webapps php

Virangar Security Sports Clubs Web Panel 0.0.1 - 'id' SQL Injection
webapps php CVE-2008-4592;OSVDB-49151

LiquidWorm Maxthon Browser 2.1.4.443 - Unicode Remote Denial of Service (PoC)
dos windows

ZoRLu Autodealers CMS AutOnline - 'id' SQL Injection
webapps php OSVDB-48168;CVE-2008-4074;CVE-2008-4073

Khashayar Fereidani minb 0.1.0 - Remote Code Execution
webapps php OSVDB-51805;CVE-2008-7005

Khashayar Fereidani phsBlog 0.2 - Bypass SQL Injection Filtering
webapps php OSVDB-48112;CVE-2008-4072

SirGod D-iscussion Board 3.01 - 'topic' Local File Inclusion
webapps php OSVDB-48017;CVE-2008-4075

Khashayar Fereidani Easy Photo Gallery 2.1 - Cross-Site Scripting / File Disclosure/Bypass / SQL Injection
webapps php OSVDB-48316;CVE-2008-6990;OSVDB-48315;CVE-2008-6989;CVE-2008-6988;OSVDB-48314;OSVDB-48313

StAkeR Sports Clubs Web Panel 0.0.1 - 'p' Local File Inclusion
webapps php OSVDB-49151;CVE-2008-4592

r45c4l Autodealers CMS AutOnline - 'pageid' SQL Injection
webapps php OSVDB-48168;CVE-2008-4074;CVE-2008-4073

Khashayar Fereidani PHPWebGallery 1.3.4 - Cross-Site Scripting / Local File Inclusion
webapps php OSVDB-49263;CVE-2008-4702;OSVDB-49262;CVE-2008-4591;OSVDB-49185

Jeremy Brown Adobe Acrobat 9 - ActiveX Remote Denial of Service
dos windows OSVDB-48422;CVE-2008-4071

r45c4l Hot Links SQL-PHP - 'news.php' SQL Injection
webapps php CVE-2008-7120;OSVDB-57581

Alexios Fakos Horde 3.2 - MIME Attachment Filename Insufficient Filtering Cross-Site Scripting
webapps php CVE-2008-3823;OSVDB-48138

Alexios Fakos Horde Application Framework 3.2.1 - Forward Slash Insufficient Filtering Cross-Site Scripting
webapps php CVE-2008-3824;OSVDB-48424