High-Tech Bridge Open Journal Systems (OJS) 2.3.6 - '/lib/pkp/classes/core/String.inc.php?String::stripUnsafeHtml()' Method Cross-Site Scripting
webapps php CVE-2012-1469;OSVDB-80257

High-Tech Bridge Open Journal Systems (OJS) 2.3.6 - 'index.php?authors[][url]' Cross-Site Scripting
webapps php CVE-2012-1469;OSVDB-80256

Stefan Schurtz CMSimple 3.3 - 'index.php' Cross-Site Scripting
webapps php

LiquidWorm phpList 2.10.17 - SQL Injection / Cross-Site Scripting
webapps php OSVDB-80284;OSVDB-80283;CVE-2012-2741;CVE-2012-2740

iqzer0 D-Link DIR-605 - Cross-Site Request Forgery
webapps hardware OSVDB-80549

Kevin Perry WebGlimpse 2.14.1/2.18.8 - 'webglimpse.cgi' Remote Command Injection
webapps cgi

wh1ant GNUBoard 4.34.20 - 'download.php' HTML Injection
webapps php CVE-2012-4873;OSVDB-80217

Abhi M Balakrishnan OneFileCMS - Failure to Restrict URL Access
webapps php OSVDB-80553

Red Security TEAM OneForum - 'topic.php' SQL Injection
webapps php OSVDB-79468

r45c4l ClassifiedsGeek.com Vacation Packages - 'listing_search' SQL Injection
webapps php

rgod ManageEngine DeviceExpert 5.6 Java Server ScheduleResultViewer servlet - Directory Traversal
webapps jsp OSVDB-80262;OSVDB-80261

A. Ramos Joomla! 2.5.0 < 2.5.1 - Blind SQL Injection
webapps php OSVDB-80705

Websecurity WebGlimpse 2.x - 'wgarcmin.cgi' Full Path Disclosure
webapps cgi CVE-2009-5112;OSVDB-80330

sonyy JavaBB 0.99 - 'userId' Cross-Site Scripting
webapps java

Easy Laster Pre Printing Press - 'product_desc.php?pid' SQL Injection
webapps php OSVDB-80191;CVE-2012-5334

r45c4l PRE PRINTING STUDIO - SQL Injection
webapps php OSVDB-80190;CVE-2012-5333