Federico Fazzi AWF CMS 1.11 - 'spaw_root' Remote File Inclusion
webapps php OSVDB-26368

Hessam-x RCblog 1.03 - 'POST' Remote Command Execution
webapps php

nukedx MaxiSepet 1.0 - 'link' SQL Injection
webapps asp

Kacper free QBoard 1.1 - 'qb_path' Remote File Inclusion
webapps php OSVDB-26376;CVE-2006-2998

Kacper WebprojectDB 0.1.3 - 'INCDIR' Remote File Inclusion
webapps php OSVDB-26340;CVE-2006-2995;OSVDB-26339

Kacper phpOnDirectory 1.0 - Remote File Inclusion
webapps php

Kacper aePartner 0.8.3 - 'dir[data]' Remote File Inclusion
webapps php OSVDB-26332;CVE-2006-2996

Kacper empris r20020923 - 'phormationdir' Remote File Inclusion
webapps php OSVDB-31601;CVE-2006-2962

r0t KAPhotoservice 7.5 - 'edtalbum.asp' Multiple Cross-Site Scripting Vulnerabilities
webapps asp CVE-2006-2955;OSVDB-26277

r0t KAPhotoservice 7.5 - 'albums.asp?albumid' Cross-Site Scripting
webapps asp CVE-2006-2955;OSVDB-26276

r0t KAPhotoservice 7.5 - 'album.asp?cat' Cross-Site Scripting
webapps asp CVE-2006-2955;OSVDB-26275

Luny Baby Katie Media VSReal and VScal 1.0 - 'myslideshow.php?title' Cross-Site Scripting
webapps php CVE-2006-2986;OSVDB-26331

Luny Baby Katie Media VSReal and VScal 1.0 - 'index.php?lid' Cross-Site Scripting
webapps php CVE-2006-2986;OSVDB-26330

Federico Fazzi 0verkill 0.16 - ASCII-ART Game Remote Integer Overflow Crash (PoC)
dos linux OSVDB-26029;CVE-2006-2971

Soroush Dalili MailEnable Enterprise 2.0 - 'ASP' Multiple Vulnerabilities
webapps asp OSVDB-26410;OSVDB-26409;OSVDB-26408;OSVDB-26407;OSVDB-26406;OSVDB-26405

Josh Bressers FreeType - '.TTF' File Remote Denial of Service
dos multiple CVE-2006-2661;OSVDB-26033