Packetdeath TenderSystem 0.9.5 - 'main.php' Multiple Local File Inclusions
webapps php

Milos Zivanovic Ez Poll Hoster - Multiple Cross-Site Scripting Vulnerabilities
webapps php

anti-gov Ez Cart - 'index.php' Cross-Site Scripting
webapps php

bi0 The Next Generation of Genealogy Sitebuilding - 'searchform.php' Cross-Site Scripting
webapps php

bi0 phpFaber CMS 1.3.36 - 'module.php' Cross-Site Scripting
webapps php CVE-2009-4382;OSVDB-60986

bi0 Million Pixel Script 3 - 'pa' Cross-Site Scripting
webapps php CVE-2009-4381;OSVDB-60961

anti-gov Ez Cart - 'sid' Cross-Site Scripting
webapps php

Hacktics Oracle E-Business Suite - Multiple Vulnerabilities
webapps multiple

G0D-F4Th3r Traidnt Discovery - Cross-Site Request Forgery (Create Staff Account)
webapps php

Salvatore Fresta WSCreator 1.1 - Blind SQL Injection
webapps php OSVDB-60987;CVE-2009-4351

Packetdeath Tender System 0.9.5b - Local File Inclusion
webapps php

Milos Zivanovic mini Hosting Panel - Cross-Site Request Forgery (Change Admin Settings)
webapps php OSVDB-61058;CVE-2009-4826

bi0 Text Exchange Pro - Cross-Site Request Forgery (Add Admin)
webapps php OSVDB-61016

bi0 Easy Banner Pro - Cross-Site Request Forgery (Add Admin)
webapps php OSVDB-61056

Milos Zivanovic Ez Poll Hoster - Multiple Cross-Site Scripting / Cross-Site Request Forgery Vulnerabilities
webapps php OSVDB-61325;CVE-2009-4385;OSVDB-61269;OSVDB-61022;CVE-2009-4384;OSVDB-61021

bi0 AdManagerPro - Cross-Site Request Forgery (Add Admin)
webapps php OSVDB-60989;CVE-2009-4828