| 22267 | phpCOIN Multiple Script _CCFG Parameter Remote File Inclusion | medium |
| 22257 | WebAdmin < 3.2.5 Multiple Vulnerabilities | high |
| 22255 | osCommerce shopping_cart.php id Array Parameters SQL Injection | high |
| 22235 | Docebo GLOBALS Variable Overwrite Remote File Inclusion | medium |
| 22234 | Zen Cart autoload_func.php autoLoadConfig Array Remote File Inclusion | medium |
| 22233 | Zen Cart ipn_main_handler.php custom SQL Injection | high |
| 22232 | Owl Intranet Engine <= 0.91 Multiple Vulnerabilities | high |
| 22231 | CubeCart < 3.0.12 Multiple Vulnerabilities (SQLi, XSS) | high |
| 22230 | SquirrelMail compose.php session_expired_post Arbitrary Variable Overwriting | medium |
| 22206 | WEBInsta CMS index.php templates_dir Parameter Remote File Inclusion | high |
| 22205 | IPCheck Server Monitor Traversal Arbitrary File Access | medium |
| 22204 | Ruby on Rails Routing Code URL Code Evaluation DoS | high |
| 22203 | Apache on Windows mod_alias URL Validation Canonicalization CGI Source Disclosure | medium |
| 22130 | Barracuda Spam Firewall Default Credentials | high |
| 22124 | phpMyAdmin import_blacklist Variable Overwriting | medium |
| 22123 | TWiki configure Script Arbitrary Command Execution | high |
| 22117 | PatchLink Update Server proxyreg.asp Arbitrary Proxy Manipulation | high |
| 22116 | PatchLink Update Server nwupload.asp Traversal Arbitrary File Write | medium |
| 22115 | PatchLink Update Server checkprofile.asp checkid Parameter SQL Injection | high |
| 22093 | OpenCms < 6.2.2 Multiple Vulnerabilities | medium |
| 22091 | Loudblog index.php id Parameter SQL Injection | high |
| 22090 | X7 Chat upgradev1.php old_prefix Parameter SQL Injection | high |
| 22089 | Invision Power Board classes/class_session.php CLIENT_IP HTTP Header SQL Injection | high |
| 22079 | IceWarp Multiple Script Remote File Inclusion | medium |
| 22078 | VHCS login.php check_login() Function Authentication Bypass | critical |
| 22077 | VHCS include/sql.php include_path Parameter Remote File Inclusion | medium |
| 22055 | MyBB HTTP Header 'CLIENT-IP' Field SQLi | high |
| 22049 | Mambo / Joomla! Component / Module 'mosConfig_absolute_path' Multiple Parameter Remote File Include Vulnerabilities | high |
| 22048 | Trend Micro OfficeScan 7.3 Multiple Vulnerabilities | high |
| 22046 | McAfee Common Management Agent Traversal Arbitrary File Write | medium |
| 22023 | SimpleBoard / Joomlaboard 'sbp' Parameter Remote File Include | high |
| 22021 | Mambo phpBB Component download.php phpbb_root_path Parameter Remote File Inclusion | medium |
| 22005 | LifeType index.php Date Parameter SQL Injection | high |
| 21918 | phpFormGenerator Arbitrary File Upload | high |
| 21787 | SiteBuilder-FX top.php admindir Parameter Remote File Inclusion | medium |
| 21785 | Webmin 'miniserv.pl' Arbitrary File Disclosure | medium |
| 21780 | FCKeditor on Apache connector.php Crafted File Extension Arbitrary File Upload | high |
| 21779 | Geeklog Multiple Script _CONF[path] Parameter Remote File Inclusion | medium |
| 21764 | Scout Portal Toolkit SPT--ForumTopics.php forumid Parameter SQL Injection | high |
| 21748 | BlueDragon 6.2.1 Multiple Remote Vulnerabilities (XSS, DoS) | medium |
| 21747 | BDPDT for DotNetNuke (.net nuke) uploadfilepopup.aspx File Upload Privilege Escalation | critical |
| 21739 | w-Agora inc_dir Parameter Remote File Inclusion | high |
| 21736 | Hosting Controller <= 6.1 Hotfix 3.1 Authenticated User Privilege Escalation | medium |
| 21729 | Wikka wikka.php Local File Inclusion | high |
| 21727 | Calendarix Multiple Script id Parameter SQL Injection | medium |
| 21675 | OpenEMR C_FormEvaluation.class.php fileroot Parameter Remote File Inclusion | medium |
| 21662 | DokuWiki Spell Checker Embedded Link Arbitrary PHP Code Execution | high |
| 21645 | Pixelpost index.php category Parameter SQL Injection | medium |
| 21641 | Claroline Multiple Script includePath Parameter Remote File Inclusion | medium |
| 21631 | LifeType index.php articleId Parameter SQL Injection | high |
