EgiX Tiki Wiki CMS Groupware 8.3 - 'Unserialize()' PHP Code Execution
webapps php CVE-2012-0911;OSVDB-83534;CVE-2012-3996

Chris Kellum WordPress Plugin MoodThingy Widget 0.8.7 - Blind SQL Injection
webapps php OSVDB-83632

Sammy FORGIT WordPress Plugin custom tables - 'key' Cross-Site Scripting
webapps php

TheCyberNuxbie PHP MBB - Cross-Site Scripting / SQL Injection
webapps php

dun phpMyBackupPro 2.2 - Local File Inclusion
webapps php OSVDB-83700

Daniel Godoy CLscript Classified Script 3.0 - SQL Injection
webapps php OSVDB-83690

Carlos Mario Penagos Hollmann gpEasy CMS Minishop 1.5 Plugin - Persistent Cross-Site Scripting
webapps php OSVDB-83542

Sammy FORGIT Getsimple CMS Items Manager Plugin - 'PHP.php' Arbitrary File Upload
webapps php

Dillon Beresford WANGKONGBAO CNS-1000 UTM IPS-FW - Directory Traversal (Metasploit)
webapps hardware OSVDB-83636;CVE-2012-4031

Soroush Dalili Microsoft IIS - Short File/Folder Name Disclosure
webapps windows OSVDB-83771

Stephan Knauss WordPress Plugin Backup 2.0.1 - Information Disclosure
webapps php OSVDB-83701

Chris Kellum WordPress Plugin Paid Business Listings 1.0.2 - Blind SQL Injection
webapps php OSVDB-83768

Nathan Partlan SWFupload - 'movieName' Cross-Site Scripting
webapps multiple CVE-2012-3414;OSVDB-83413

MustLive LIOOSYS CMS - SQL Injection / Information Disclosure
webapps php

Sammy FORGIT JAKCMS PRO 2.2.6 - 'uploader.php' Arbitrary File Upload
webapps php

Luigi Auriemma specview 2.5 build 853 - Directory Traversal
webapps windows OSVDB-83396;CVE-2012-5972