Kc57 Symantec Web Gateway 5.0.3.18 - 'deptUploads_data.php?groupid' Blind SQL Injection
webapps php CVE-2012-4178;OSVDB-84455

Crim3R eNdonesia - 'cid' SQL Injection
webapps php

MustLive JW Player - 'playerready' Cross-Site Scripting
webapps php CVE-2012-3351;OSVDB-82815

Aung Khant ocPortal 7.1.5 - 'redirect' Open Redirection
webapps php

HauntIT phpBB - Multiple SQL Injections
webapps php

Metasploit CuteFlow 2.11.2 - Arbitrary File Upload (Metasploit)
webapps php OSVDB-84289

Socket_0x03 tekno.Portal 0.1b - 'anket.php' SQL Injection
webapps php

Daniel Barragan Joomla! Component Odudeprofile 2.8 - 'profession' SQL Injection
webapps php

L0n3ly-H34rT phpProfiles - Multiple Vulnerabilities
webapps php

muts Zabbix 2.0.1 - Session Extractor
webapps php OSVDB-84127;CVE-2012-3435

Chris Kellum WordPress Plugin Front End Upload 0.5.4.4 - Arbitrary '.PHP' File Upload
webapps php OSVDB-82791

muts Symantec Web Gateway 5.0.3.18 - Local/Remote File Inclusion / Remote Command Execution
webapps linux CVE-2012-2957;OSVDB-84119;OSVDB-128843

dookie SpiceWorks 5.3.75941 - Persistent Cross-Site Scripting / (Authenticated) SQL Injection
webapps windows CVE-2012-6658;OSVDB-84113;OSVDB-84112;CVE-2012-2956

muts Alienvault Open Source SIEM (OSSIM) 3.1 - Reflected Cross-Site Scripting / Blind SQL Injection
webapps php CVE-2012-3835;CVE-2012-3834;CVE-2012-2599;OSVDB-81663;OSVDB-81662

Daniel Godoy MySQL Squid Access Report 2.1.4 - HTML Injection
webapps php OSVDB-84680

muts Symantec Web Gateway 5.0.3.18 - Blind SQL Injection Backdoor via MySQL Triggers
webapps php CVE-2012-2961;OSVDB-84123;OSVDB-128846