eidelweiss YACS CMS 10.5.27 - 'context[path_to_root]' Remote File Inclusion
webapps php

Marshall Whittaker iOffice 0.1 - 'parametre' Remote Command Execution
webapps cgi

Mahjong rapidCMS 2.0 - Authentication Bypass
webapps php

ViRuS Qalaa PHP-Fusion - Remote Command Execution
webapps php OSVDB-68761

ScOrPiOn Kayako eSupport 3.70.02 - 'functions.php' SQL Injection
webapps php CVE-2010-2912;CVE-2010-2911;OSVDB-66744

walid ClickAndRank Script - Authentication Bypass
webapps asp

Palyo34 & KroNicKq Joomla! Component StaticXT - SQL Injection
webapps php CVE-2010-2919;OSVDB-66820

Palyo34 & KroNicKq Joomla! Component com_spa - SQL Injection (2)
webapps php

SixP4ck3r Calendarix - 'cal_cat.php' SQL Injection
webapps php OSVDB-66439

Sid3^effects Kayako eSupport 3.70.02 - SQL Injection
webapps php CVE-2010-2912;CVE-2010-2911;OSVDB-66744

Sid3^effects Subrion Auto Classifieds - Persistent Cross-Site Scripting
webapps php OSVDB-66444

Sid3^effects Freelancer Marketplace Script - Arbitrary File Upload
webapps php

Sid3^effects Freelancers Marketplace Script - Persistent Cross-Site Scripting
webapps php OSVDB-66471

Canberk BOLAT Group Office - 'comment_id' SQL Injection
webapps php OSVDB-66578

Markot ActiTime 2.0-MA - Cross-Site Request Forgery
webapps windows OSVDB-66440

ADEO Security Group Office - Remote Command Execution
webapps php OSVDB-66579