RENO cPanel 11.x - 'fileop' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2009-4823;OSVDB-61231

Juan Galiana Lara QuiXplorer 2.x - 'lang' Local File Inclusion
webapps php

Metropolis Pluxml-Blog 4.2 - '/core/admin/auth.php' Cross-Site Scripting
webapps php

Hadi Kiamarsi Rumba XM - Cross-Site Scripting
webapps php OSVDB-61137;CVE-2009-4403

Neo-GabrieL VirtueMart - 'Product_ID' SQL Injection
webapps php OSVDB-61408;CVE-2009-4430

Braeden Thomas Piwik Open Flash Chart - Remote Code Execution
webapps php CVE-2011-4275;OSVDB-59051;CVE-2009-4140

loneferret jCore CMS - Cross-Site Scripting
webapps php OSVDB-61146

R3d-D3V!L eWebquiz 8 - Blind SQL Injection
webapps asp OSVDB-61414;CVE-2009-4436;OSVDB-61413;OSVDB-61412

R3d-D3V!L V.H.S. Booking - 'hotel_habitaciones.php?HotelID' SQL Injection
webapps php CVE-2008-6809;OSVDB-54620

R3d-D3V!L ReVou Software - SQL Injection
webapps php

R3d-D3V!L ActiveBuyandSell 6.2 - 'buyersend.asp?catid' Blind SQL Injection
webapps asp CVE-2005-2062;OSVDB-17548

R3d-D3V!L Active Auction House 3.6 - Blind SQL Injection
webapps asp OSVDB-61416;CVE-2009-4437;OSVDB-61415

RENO Basic PHP Events Lister 2 - Arbitrary Add Admin
webapps php

AnTi SeCuRe dblog - 'dblog.mdb' Remote Database Disclosure
webapps windows CVE-2007-5026;OSVDB-43970

Juan Galiana Lara Horde 3.3.5 - 'PHP_SELF' Cross-Site Scripting
webapps php CVE-2009-3701

wlhaan hacker PHP F1 Upload - Arbitrary File Upload
webapps php OSVDB-61156