$qL_DoCt0r Battle Blog 1.25 - Authentication Bypass / SQL Injection / HTML Injection
webapps php OSVDB-59050;CVE-2009-3719;OSVDB-55991;CVE-2009-3718

SirGod AJOX Poll - 'managepoll.php' Authentication Bypass
webapps php OSVDB-58886;CVE-2009-3596

JIKO Super Simple Blog Script 2.5.4 - 'entry' SQL Injection
webapps php OSVDB-55952;CVE-2009-2553

JIKO Super Simple Blog Script 2.5.4 - Local File Inclusion
webapps php OSVDB-55953;CVE-2009-2552

MaXe Skybluecanvas 1.1 r237 - 'admin.php' Directory Traversal
webapps php CVE-2009-2116;OSVDB-55193

Moudi Scriptsez Ultimate Poll - 'demo_page.php' Cross-Site Scripting
webapps php CVE-2009-3601;OSVDB-55914

MustLive XAMPP 1.6.x - 'showcode.php' Local File Inclusion
webapps multiple

NoGe dB Masters MultiMedia's Content Manager 4.5 - SQL Injection
webapps php

boom3rang PHP Live! 3.2.1/2 - 'x' Blind SQL Injection
webapps php OSVDB-63310;CVE-2009-4749;OSVDB-63309

C0D3R-Dz VS PANEL 7.5.5 - 'results.php?Cat_ID' SQL Injection
webapps php OSVDB-56570;CVE-2009-3595

petros ZenPhoto Gallery 1.2.5 - Admin Password Reset (Cross-Site Request Forgery)
webapps php OSVDB-55922;CVE-2009-4563;OSVDB-55921;CVE-2009-4562

ka0x webLeague 2.2.0 - Authentication Bypass
webapps php OSVDB-61554;CVE-2009-4561

TiGeR-Dz webLeague 2.2.0 - 'install.php' Remote Change Password
webapps php

Moudi eCardMAX FormXP - 'survey_result.php' Cross-Site Scripting
webapps php CVE-2009-3598;OSVDB-55859

Arka69 WebLeague 2.2.0 - 'profile.php' SQL Injection
webapps php OSVDB-61553;CVE-2009-4560

Securitylab.ir Admin News Tools - Remote Contents Change
webapps php OSVDB-56235;CVE-2009-2558