Yakir Wizman SmartCMS - '/index.php?menuitem' SQL Injection / Cross-Site Scripting
webapps php OSVDB-88056;OSVDB-88055

Yakir Wizman Free Hosting Manager 2.0 - 'id' SQL Injection
webapps php OSVDB-88063

cheki Elastix - 'page' Cross-Site Scripting
webapps php CVE-2012-6608;OSVDB-88059

Ashiyane Digital Security Team WordPress Theme Toolbox - 'mls' SQL Injection
webapps php OSVDB-88293

Aditya Balapure WordPress Plugin Video Lead Form - 'errMsg' Cross-Site Scripting
webapps php CVE-2012-6312;OSVDB-88002

Metasploit Network Shutdown Module 3.21 - 'sort_values' Remote PHP Code Injection (Metasploit)
remote php OSVDB-83199

Ur0b0r0x BigDump 0.29b and 0.32b - Multiple Vulnerabilities
webapps php

Amirh03in WordPress Theme CStar Design - 'id' SQL Injection
webapps php

Amirh03in WordPress Theme Wp-ImageZoom - 'id' SQL Injection
webapps php OSVDB-87870

Ashiyane Digital Security Team WordPress Plugin Ads Box - 'count' SQL Injection
webapps php OSVDB-88257

LiquidWorm PRADO PHP Framework 3.2.0 - Arbitrary File Read
webapps php OSVDB-87874;OSVDB-87873

NoGe SmartCMS - 'index.php?idx' SQL Injection
webapps php OSVDB-87871

d3b4g BuyClassifiedScript - PHP Code Injection
webapps php OSVDB-87875

hossein beizaee ES CmS 0.1 - SQL Injection
webapps php OSVDB-87868

Woody Hughes jBilling 3.0.2 - Cross-Site Scripting
webapps php OSVDB-87865

Metropolis Beat Websites - 'id' SQL Injection
webapps php