MustLive ExpressionEngine 1.2.1 - HTTP Response Splitting / Cross-Site Scripting
webapps php

MustLive Nucleus CMS 3.0.1 - 'myid' SQL Injection
webapps php

MustLive PRO-Search 0.17 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2008-0207;OSVDB-39859

MustLive AwesomeTemplateEngine 1 - Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2008-0190;OSVDB-40384

3APA3A WordPress Core 2.2.3 - '/wp-admin/edit.php?backup' Cross-Site Scripting
webapps php CVE-2008-0193;OSVDB-43408

3APA3A WordPress Core 2.2.3 - '/wp-admin/page-new.php?popuptitle' Cross-Site Scripting
webapps php CVE-2008-0192;OSVDB-40225

3APA3A WordPress Core 2.2.3 - '/wp-admin/post.php?popuptitle' Cross-Site Scripting
webapps php CVE-2008-0192;OSVDB-40224

The:Paradox MyPHP Forum 3.0 - 'search.php' Multiple SQL Injections
webapps php

vivek_infosec W3-mSQL - Error Page Cross-Site Scripting
webapps cgi CVE-2008-0146;OSVDB-40204

EgiX Site@School 2.4.10 - Blind SQL Injection
webapps php OSVDB-40197;CVE-2008-0129

The:Paradox MyPHP Forum 3.0 - 'Final' SQL Injection
webapps php OSVDB-39783;CVE-2008-0099

greyvoip Asterisk 1.x - BYE Message Remote Denial of Service
dos multiple CVE-2008-0095;OSVDB-39841

Rich Cannings InfoSoft FusionCharts 3 - '.swf' Flash File Remote Code Execution
remote multiple CVE-2008-6060;OSVDB-56437

Rich Cannings Camtasia Studio 4.0.2 - 'csPreloader' Remote Code Execution
remote multiple CVE-2008-6061;OSVDB-40102

Luigi Auriemma White_Dune 0.29beta791 - Multiple Local Code Execution Vulnerabilities
local multiple CVE-2008-0100;OSVDB-42672

AmnPardaz Security Research Team MODx 0.9.6.1 - 'AjaxSearch.php' Local File Inclusion
webapps php CVE-2008-0094;OSVDB-39956