Alexander Polyakov Adobe ColdFusion Server 8.0.1 - 'administrator/logviewer/searchlog.cfm?startRow' Cross-Site Scripting
webapps cfm CVE-2009-1872;OSVDB-57182

Alexander Polyakov Adobe ColdFusion Server 8.0.1 - '/wizards/common/_authenticatewizarduser.cfm' Query String Cross-Site Scripting
webapps cfm CVE-2009-1872;OSVDB-57184

Securitylab.ir Discuz! 6.0 - '2fly_gift.php' SQL Injection
webapps php CVE-2009-2915;OSVDB-57136

Mr.tro0oqy MyWeight 1.0 - Arbitrary File Upload
webapps php OSVDB-70182

Mr.tro0oqy DS CMS 1.0 - 'nFileId' SQL Injection
webapps php OSVDB-57336;CVE-2009-2927

Mr.SQL PHP Competition System 0.84 - 'competition' SQL Injection
webapps php OSVDB-57338;CVE-2009-2926;OSVDB-57337

Khashayar Fereidani Ignition 1.2 - 'comment' Remote Code Injection
webapps php

Isfahan Elkagroup Elkapax - 'q' Cross-Site Scripting
webapps php CVE-2009-2930

[]ViZiOn tgs CMS 0.x - Cross-Site Scripting / SQL Injection / File Disclosure
webapps php OSVDB-57478;CVE-2009-2929;OSVDB-57477;CVE-2009-2928;OSVDB-57335

RoMaNcYxHaCkEr Gazelle CMS 1.0 - Arbitrary File Upload
webapps php OSVDB-58118;CVE-2009-3182

Ams JBLOG 1.5.1 - SQL Table Backup
webapps php OSVDB-56993

IHTeam Gazelle CMS 1.0 - Multiple Vulnerabilities / Remote Code Execution
webapps php OSVDB-58117;CVE-2009-3182;OSVDB-58116;CVE-2009-3181;OSVDB-58114;OSVDB-58113;CVE-2009-3180;OSVDB-51655;CVE-2009-3171;CVE-2009-3167

Sense of Security Plume CMS 1.2.3 - Multiple SQL Injections
webapps php CVE-2009-3418;OSVDB-57008;OSVDB-57007

ilker Kandemir Gallarific 1.1 - '/gallery.php' Arbitrary Delete/Edit Category
webapps php

Pedro Laguna Shorty 0.7.1b - (Authentication Bypass) Insecure Cookie Handling
webapps php

Guilherme Marinheiro OCS Inventory NG 1.2.1 - 'systemid' SQL Injection
webapps php OSVDB-57620;CVE-2009-3042