Aditya Balapure WordPress Plugin Video Lead Form - 'errMsg' Cross-Site Scripting
webapps php CVE-2012-6312;OSVDB-88002

Soroush Dalili FCKEditor Core ASP 2.6.8 - Arbitrary File Upload Protection Bypass
webapps asp OSVDB-89282

LiquidWorm Oracle OpenSSO 8.0 - Multiple Cross-Site Scripting POST Injection Vulnerabilities
webapps multiple OSVDB-88053;OSVDB-88052

Ur0b0r0x BigDump 0.29b and 0.32b - Multiple Vulnerabilities
webapps php

Soroush Dalili gleamtech filevista/fileultimate 4.6 - Directory Traversal
webapps windows

Amirh03in WordPress Theme CStar Design - 'id' SQL Injection
webapps php

Amirh03in WordPress Theme Wp-ImageZoom - 'id' SQL Injection
webapps php OSVDB-87870

Joseph Sheridan Forescout CounterACT - 'a' Open Redirection
webapps multiple CVE-2012-4982;OSVDB-87893

Ashiyane Digital Security Team WordPress Plugin Ads Box - 'count' SQL Injection
webapps php OSVDB-88257

LiquidWorm PRADO PHP Framework 3.2.0 - Arbitrary File Read
webapps php OSVDB-87874;OSVDB-87873

Nahuel Grisolia Websense Proxy - Filter Bypass
dos multiple OSVDB-87867

Metropolis Beat Websites - 'id' SQL Injection
webapps php

Carlos Reventlov Twitter for iPhone - Man in the Middle Security
remote ios OSVDB-87854

Andy Lutomirski TrouSerS - Denial of Service
dos linux CVE-2012-0698;OSVDB-87739

Ashiyane Digital Security Team WordPress Plugin Zarzadzonie Kontem - 'ajaxfilemanager.php' Script Arbitrary File Upload
webapps php OSVDB-87834

Ashiyane Digital Security Team WordPress Plugin Zingiri Web Shop - 'path' Arbitrary File Upload
webapps php OSVDB-87833