cr4wl3r gpEasy 1.5RC3 - Remote File Inclusion
webapps php

Gamoscu WordPress Plugin Pyrmont 2.x - SQL Injection
webapps php OSVDB-61407;CVE-2009-4424

loneferret jCore - 'search' Cross-Site Scripting
webapps java

bi0 Pre Jobo.NET - Multiple SQL Injections
webapps asp

Fl0riX & Snakespc Joomla! Component com_joomportfolio - 'secid' SQL Injection
webapps php CVE-2009-4428;OSVDB-61138

RENO cPanel 11.x - 'fileop' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2009-4823;OSVDB-61231

Juan Galiana Lara QuiXplorer 2.x - 'lang' Local File Inclusion
webapps php

Metropolis Pluxml-Blog 4.2 - '/core/admin/auth.php' Cross-Site Scripting
webapps php

Hadi Kiamarsi Rumba XM - Cross-Site Scripting
webapps php OSVDB-61137;CVE-2009-4403

Neo-GabrieL VirtueMart - 'Product_ID' SQL Injection
webapps php OSVDB-61408;CVE-2009-4430

Braeden Thomas Piwik Open Flash Chart - Remote Code Execution
webapps php CVE-2011-4275;OSVDB-59051;CVE-2009-4140

loneferret jCore CMS - Cross-Site Scripting
webapps php OSVDB-61146

R3d-D3V!L eWebquiz 8 - Blind SQL Injection
webapps asp OSVDB-61414;CVE-2009-4436;OSVDB-61413;OSVDB-61412

R3d-D3V!L V.H.S. Booking - 'hotel_habitaciones.php?HotelID' SQL Injection
webapps php CVE-2008-6809;OSVDB-54620

R3d-D3V!L ReVou Software - SQL Injection
webapps php

R3d-D3V!L ActiveBuyandSell 6.2 - 'buyersend.asp?catid' Blind SQL Injection
webapps asp CVE-2005-2062;OSVDB-17548