Ro0T-MaFia TYPO3 CMS 4.0 - 'showUid' SQL Injection
webapps php OSVDB-64565;CVE-2009-4855

int_main(); PHP Script Forum Hoster - Topic Delete / Cross-Site Scripting
webapps php OSVDB-56849;OSVDB-56848

599eme Man AJ Auction Pro 3.0 - 'txtkeyword' Cross-Site Scripting
webapps php CVE-2009-4989;OSVDB-56811

Chip d3 bi0s Portel 2008 - 'decide.php?patron' Blind SQL Injection
webapps php

SirGod opennews 1.0 - SQL Injection / Remote Code Execution
webapps php OSVDB-56813;CVE-2009-2736;OSVDB-56812;CVE-2009-2735

Moudi AccessoriesMe PHP Affiliate Script 1.4 - Blind SQL Injection / Cross-Site Scripting
webapps php OSVDB-67710;OSVDB-56800;CVE-2009-4985;CVE-2009-4984;OSVDB-56799

Ins3t Irokez CMS 0.7.1 - SQL Injection
webapps php CVE-2009-4982;OSVDB-67709

SirGod tenrok 1.1.0 - File Disclosure / Remote Code Execution
webapps php

SirGod mybackup 1.4.0 - File Download / Remote File Inclusion
webapps php OSVDB-56808;OSVDB-56807;CVE-2009-4978;CVE-2009-4977

Ryan Dewhurst CS-Cart 2.0.5 - 'reward_points.post.php' SQL Injection
webapps php CVE-2009-2579;OSVDB-56764

Angela Chang In-portal 4.3.1 - 'index.php?env' Local File Inclusion
webapps php OSVDB-56801;CVE-2009-4986

Shadow Perl$hop E-Commerce Script - Trust Boundary Input Parameter Injection
webapps cgi

PLATEN ShopMaker CMS 2.0 - Blind SQL Injection / Local File Inclusion
webapps php

eLwaux elgg 1.5 - '/_css/js.php' Local File Inclusion
webapps php OSVDB-56760;CVE-2009-3149

SirGod MOC Designs PHP News 1.1 - Authentication Bypass
webapps php OSVDB-57249;CVE-2009-2921

Drosophila Blog Ink (Blink) - Multiple SQL Injections
webapps php