AutoSec Tools webERP 4.0.1 - 'InputSerialItemsFile.php' Arbitrary File Upload
webapps php

AutoSec Tools Dolphin 7.0.4 - Multiple Cross-Site Scripting Vulnerabilities
webapps php

Core Security ManageEngine ADSelfService Plus 4.4 - 'EmployeeSearch.cc' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2010-3274;OSVDB-70872

Core Security ManageEngine ADSelfService Plus 4.4 - POST Manipulation Security Question
webapps php CVE-2010-3272;OSVDB-70870

anonymous LocatePC 1.05 (Ligatt Version + Others) - SQL Injection
webapps multiple

jonieske Smarty Template Engine 2.6.9 - '$smarty.template' PHP Code Injection
webapps php

MustLive PHPXref 0.7 - 'nav.html' Cross-Site Scripting
webapps php

Sw1tCh SourceBans 1.4.7 - Cross-Site Scripting
webapps php OSVDB-70882

Ulf Harnhammar WordPress Plugin Enable Media Replace - Multiple Vulnerabilities
webapps php OSVDB-70996;OSVDB-70995

WHITE_DEVIL MihanTools Script 1.3.3 - SQL Injection
webapps php CVE-2011-1048;OSVDB-70858

NoNameMT Web 2.0 Social Network Freunde Community - SQL Injection
webapps php

Saif Auto Database System 1.0 Infusion Addon - SQL Injection
webapps php

High-Tech Bridge SA UMI CMS 2.8.1.2 - Multiple Cross-Site Scripting Vulnerabilities
webapps php

AutoSec Tools CiviCRM 3.3.3 - Multiple Cross-Site Scripting Vulnerabilities
webapps php

High-Tech Bridge SA ViArt Shop 4.0.5 - Multiple Cross-Site Scripting Vulnerabilities
webapps php

High-Tech Bridge SA WebAsyst Shop-Script - Cross-Site Scripting / HTML Injection
webapps php