SirGod pastelcms 0.8.0 - Local File Inclusion / SQL Injection
webapps php OSVDB-53887;CVE-2009-1405;OSVDB-53886;CVE-2009-1404

Player CRE Loaded 6.2 - 'products_id' SQL Injection
webapps php OSVDB-54125;CVE-2009-1403

Vrs-hCk Online Contact Manager 3.0 - 'delete.php?id' Cross-Site Scripting
webapps php CVE-2009-4926;OSVDB-53820

Vrs-hCk Online Contact Manager 3.0 - 'edit.php?id' Cross-Site Scripting
webapps php CVE-2009-4926;OSVDB-53819

Vrs-hCk Online Contact Manager 3.0 - 'email.php?id' Cross-Site Scripting
webapps php CVE-2009-4926;OSVDB-53818

Vrs-hCk Online Contact Manager 3.0 - 'view.php?id' Cross-Site Scripting
webapps php CVE-2009-4926;OSVDB-53817

Vrs-hCk Online Contact Manager 3.0 - 'index.php?showGroup' Cross-Site Scripting
webapps php CVE-2009-4926;OSVDB-53816

Vrs-hCk Online Photo Pro 2.0 - 'section' Cross-Site Scripting
webapps php CVE-2009-4934;OSVDB-53807

Gabriel Lima Linksys WRT54GC 1.5.7 Firmware - 'administration.cgi' Access Validation
remote hardware CVE-2009-1561;OSVDB-54092

Salvatore Fresta Creasito E-Commerce 1.3.16 - Authentication Bypass
webapps php OSVDB-53821;CVE-2009-4925

StAkeR e107 < 0.7.15 - 'extended_user_fields' Blind SQL Injection
webapps php OSVDB-53812;CVE-2009-1409

DarKdewiL TotalCalendar 2.4 - 'inc_dir' Remote File Inclusion
webapps php

YEnH4ckEr fungamez rc1 - Authentication Bypass / Local File Inclusion
webapps php OSVDB-54165;CVE-2009-1489;OSVDB-54164;CVE-2009-1488;OSVDB-54163;CVE-2009-1487

YEnH4ckEr WysGui CMS 1.2b - Insecure Cookie Handling Blind SQL Injection
webapps php OSVDB-55995

Rohit Bansal Pligg CMS 9.9.0 - 'editlink.php' Blind SQL Injection
webapps php

girex Flatnux 2009-03-27 - Arbitrary File Upload / Information Disclosure
webapps php OSVDB-53865;OSVDB-53864;OSVDB-53863;OSVDB-53862;OSVDB-53861;OSVDB-53860;OSVDB-53859;OSVDB-53858;OSVDB-53857