High-Tech Bridge SA 11in1 CMS 1.2.1 - Cross-Site Request Forgery (Admin Password)
webapps php CVE-2012-0997;OSVDB-79307

High-Tech Bridge SA 11in1 CMS 1.2.1 - '/admin/index.php?class' Traversal Local File Inclusion
webapps php CVE-2012-0996;OSVDB-79308

High-Tech Bridge SA 11in1 CMS 1.2.1 - 'index.php?class' Traversal Local File Inclusion
webapps php CVE-2012-0996;OSVDB-79309

chippy1337 EditWrxLite CMS - 'wrx.cgi' Remote Command Execution
webapps cgi

Liyan Oz STHS v2 Web Portal - 'team.php?team' SQL Injection
webapps php CVE-2012-1217;OSVDB-79600

Liyan Oz STHS v2 Web Portal - 'prospect.php?team' SQL Injection
webapps php CVE-2012-1217;OSVDB-79599

Liyan Oz STHS v2 Web Portal - 'prospects.php?team' SQL Injection
webapps php CVE-2012-1217;OSVDB-79598

indoushka Powie pFile 1.02 - '/pfile/file.php?id' SQL Injection
webapps php CVE-2012-1210;OSVDB-79594

indoushka Powie pFile 1.02 - '/pfile/kommentar.php?filecat' Cross-Site Scripting
webapps php CVE-2012-1211;OSVDB-79595

sonyy SMW+ 1.5.6 - 'target' HTML Injection
webapps php

sonyy Zimbra - 'view' Cross-Site Scripting
webapps php CVE-2012-1213;OSVDB-79596

Benjamin Kunz Mejri eFront Community++ 3.6.10 - SQL Injection / Multiple HTML Injection Vulnerabilities
webapps php

Avram Marius Fork CMS 3.2.4 - Local File Inclusion / Cross-Site Scripting
webapps php OSVDB-79274;OSVDB-79273;CVE-2012-1304;CVE-2012-1208;OSVDB-79272

indoushka Basic Analysis and Security Engine (BASE) 1.4.5 - 'base_ag_main.php' Crafted Arbitrary File Upload / Arbitrary Code Execution
webapps php CVE-2012-1198;OSVDB-79510

indoushka Basic Analysis and Security Engine (BASE) 1.4.5 - '/admin/index.php?base_path' Remote File Inclusion
webapps php CVE-2012-1199;OSVDB-79541

indoushka Basic Analysis and Security Engine (BASE) 1.4.5 - '/admin/base_useradmin.php?base_path' Remote File Inclusion
webapps php CVE-2012-1199;OSVDB-79540