indoushka XT-Commerce 1.0 Beta 1 - Pass / Create and Download Backup
webapps php

indoushka TR Forum 1.5 - Multiple Vulnerabilities
webapps php

Sid3^effects Articles Directory - Authentication Bypass
webapps php

John Leitch Tele Data's Contact Management Server 0.9 - 'Username' SQL Injection
webapps php

indoushka velBox 1.2 - Insecure Cookie Authentication Bypass
webapps php

v3n0m PHP Video Battle - SQL Injection
webapps php OSVDB-64129;CVE-2010-1701

v3n0m Modelbook - 'casting_view.php' SQL Injection
webapps php OSVDB-64128;CVE-2010-1705

41.w4r10r GeneShop 5.1.1 - SQL Injection
webapps php

Giuseppe 'giudinvx' D'Inverno gpEasy 1.6.1 - Cross-Site Request Forgery (Add Admin)
webapps php OSVDB-64130;CVE-2010-2039

Manas58 Joomla! Component Wap4Joomla! - 'wapmain.php' SQL Injection
webapps php

41.w4r10r SoftBizScripts Hosting Script - SQL Injection
webapps php CVE-2005-3817;OSVDB-21081

41.w4r10r SoftBizScripts Dating Script - SQL Injection
webapps php CVE-2006-3271;OSVDB-26793

Don Tukulesto Pligg CMS 1.0.4 - 'story.php' SQL Injection
webapps php

Jelmer de Hen NIBE heat pump - Local File Inclusion
webapps cgi OSVDB-64273

Jelmer de Hen NIBE heat pump - Remote Code Execution
webapps cgi OSVDB-64274

Sid3^effects Joomla! Component com_jesectionfinder - Arbitrary File Upload
webapps php