Vulnerability-Lab Dolibarr ERP/CRM 3.2.0 < Alpha - File Inclusion
webapps php OSVDB-79139;OSVDB-79138;CVE-2012-1226

Vulnerability-Lab Cyberoam Central Console 2.00.2 - Remote File Inclusion
webapps multiple OSVDB-79326;CVE-2012-1047

hackme Gazelle CMS 1.0 - Update Statement SQL Injection
webapps php OSVDB-81482

Chokri B.A eFront 3.6.10 - 'administrator.php' Cross-Site Scripting
webapps php CVE-2012-1048;OSVDB-79327

LiquidWorm ManageEngine ADManager Plus 5.2 Build 5210 - 'domainName' Cross-Site Scripting
webapps java CVE-2012-1049;OSVDB-78901

LiquidWorm ManageEngine ADManager Plus 5.2 Build 5210 - 'Operation' Cross-Site Scripting
webapps java CVE-2012-1049;OSVDB-78902

Infoserve Security Team Simple Groupware 0.742 - 'export' Cross-Site Scripting
webapps php CVE-2012-1028;OSVDB-78918

Vaibhav Gupta Flyspray 0.9.9.6 - Cross-Site Request Forgery
webapps php OSVDB-78923;CVE-2012-1058

T0x!c Vespa 0.8.6 - 'getid3.php' Local File Inclusion
webapps php

chap0 XRayCMS 1.1.1 - SQL Injection
webapps php OSVDB-79000;CVE-2012-1026

Daniel Godoy Tube Ace (Adult PHP Tube Script) - SQL Injection
webapps php OSVDB-78900;CVE-2012-1029

a.kadir altan BASE 1.4.5 - 'base_qry_main.php?t_view' SQL Injection
webapps php OSVDB-78908;CVE-2012-1017

Giuseppe D'Inverno GAzie 5.20 - Cross-Site Request Forgery
webapps php OSVDB-79096;CVE-2012-1220

Am!r PHP-Fusion 7.2.4 - 'weblink_id' SQL Injection
webapps php

Michail Poultsakis project-open 3.4.x - 'account-closed.tcl' Cross-Site Scripting
webapps php CVE-2012-1027;OSVDB-78823

BHG Security Center Joomla! Component Currency Converter 1.0.0 - 'from' Cross-Site Scripting
webapps php CVE-2012-1018;OSVDB-78998