CMD PHP-Nuke - 'friend.php' Module SQL Injection
webapps php

Christophe de la Fuente Digital Factory Publique! 2.3 - 'sid' SQL Injection
webapps cgi

Stefan Esser DeluxeBB 1.x - 'newpost.php' SQL Injection
webapps php CVE-2010-1859;OSVDB-64547

JosS & eidelweiss REZERVI 3.0.2 - Remote Command Execution
webapps php OSVDB-65031

MasterGipy WeBProdZ CMS - SQL Injection
webapps php

ALTBTA Factux - Local File Inclusion
webapps php OSVDB-64382;OSVDB-64381;OSVDB-64380;OSVDB-64379;OSVDB-64378;OSVDB-64377;OSVDB-64376;OSVDB-64375

Nicolas DEROUET OCS Inventory NG Server 1.3.1 - 'LOGIN' Remote Authentication Bypass
webapps php CVE-2009-1443;OSVDB-53938

Vadim Toptunov AV Arcade - 'Search' Cross-Site Scripting / HTML Injection
webapps php OSVDB-64438

Batch Getsimple CMS 2.01 - Local File Inclusion
webapps php OSVDB-64392

MustLive WordPress Plugin Cimy Counter 0.9.4 - HTTP Response Splitting / Cross-Site Scripting
webapps php

MustLive WordPress Plugin TYPO3 't3m_cumulus_tagcloud' Extension 1.0 - HTML Injection / Cross-Site Scripting
webapps multiple

Sn!pEr.S!Te Hacker Slooze PHP Web Photo Album 0.2.7 - Command Execution
webapps php OSVDB-65053

CMD PHP-Nuke 5.0 - Viewslink SQL Injection
webapps php

Michael Brooks PHP-Nuke 7.0/8.1/8.1.35 - Wormable Remote Code Execution
webapps php CVE-2004-1315

Ariko-Security SmartCMS 2 - SQL Injection
webapps php OSVDB-64972;CVE-2014-9558

eidelweiss Knowledgeroot (fckeditor) - Arbitrary File Upload
webapps php