Am!r WordPress Plugin flash-album-gallery - 'flagshow.php' Cross-Site Scripting
webapps php

Metasploit Traq 2.3 - Authentication Bypass / Remote Code Execution (Metasploit)
webapps php OSVDB-77556

Am!r WordPress Plugin GRAND FlAGallery 1.57 - 'flagshow.php' Cross-Site Scripting
webapps php

hackme Pixie 1.04 - Blog Post Cross-Site Request Forgery
webapps php OSVDB-83188

blkhtc0rp Xoops 2.5.4 - Blind SQL Injection
webapps php OSVDB-83158

Ahmed Elhady Mohamed FCMS CMS 2.7.2 - Multiple Cross-Site Request Forgery Vulnerabilities
webapps php OSVDB-77635

Saif WordPress Plugin UPM Polls 1.0.4 - Blind SQL Injection
webapps php OSVDB-77633

Ahmed Elhady Mohamed Family CMS 2.7.2 - Multiple Persistent Cross-Site Scripting Vulnerabilities
webapps php OSVDB-83198;OSVDB-83197;OSVDB-83196;OSVDB-78470;CVE-2012-0699

Mr.PaPaRoSSe Pet Listing - 'preview.php' Cross-Site Scripting
webapps php

mr_me Docebo Lms 4.0.4 - 'Messages' Remote Code Execution
webapps php OSVDB-85228;CVE-2011-5135;OSVDB-77632

Don SePortal 2.5 - SQL Injection (1)
webapps php OSVDB-77591

Don Joomla! Component com_qcontacts 1.0.6 - SQL Injection
webapps php OSVDB-77723

Troy SantriaCMS - SQL Injection
webapps php OSVDB-83191

Havok SourceBans 1.4.8 - SQL Injection / Local File Inclusion Injection
webapps php OSVDB-77578;OSVDB-77577

The:Paradox SMF 2.0.1 - SQL Injection / Privilege Escalation
webapps php OSVDB-83192

EgiX Traq 2.3 - Authentication Bypass / Remote Code Execution
webapps php OSVDB-77556