| 31095 | Joomla! 'mosConfig_absolute_path' Parameter Remote File Include | critical |
| 31051 | osCommerce Customer Testimonials customer_testimonials.php testimonial_id Parameter SQL Injection | high |
| 31048 | Cacti index.php/sql.php Login Action login_username Parameter SQL Injection | high |
| 30253 | ExtremeZ-IP File and Print Server Zidget/HTTP Server Traversal Arbitrary File Access | medium |
| 30216 | F5 BIG-IP Web Management Interface Version | info |
| 30211 | Symantec Backup Exec System Recovery Manager FileUpload Class Unauthorized File Upload | critical |
| 30208 | Ipswitch WS_FTP Server Manager /WSFTPSVR/FTPLogServer/LogViewer.asp Authentication Bypass | medium |
| 30151 | AkoGallery Component for Mambo / Joomla! 'id' Parameter SQLi | high |
| 30132 | Coppermine imageObjectIM.class.php Command Execution Vulnerabilities | high |
| 30131 | SQLiteManager confirm.php spaw_root Parameter Remote File Inclusion | medium |
| 30129 | WordPress AdServe 'adclick.php' 'id' Parameter SQL Injection | high |
| 30124 | Smart Publisher index.php filedata Parameter Arbitrary Command Execution | high |
| 30110 | Mambo MOStlyCE Mambot Arbitrary File Rename | medium |
| 30109 | WordPress fGallery 'fim_rss.php' 'album' Parameter SQL Injection | high |
| 30108 | vTiger CRM Directory File Disclosure | medium |
| 30107 | CandyPress Store admin/utilities_ConfigHelp.asp helpfield Parameter SQL Injection | high |
| 30056 | ManageEngine Applications Manager Invalid URL Remote Information Disclosure | medium |
| 30055 | MoinMoin MOIN_ID Cookie userform Action Traversal Arbitrary File Overwrite | high |
| 30054 | YaBB SE Cookie Authentication Bypass | high |
| 30053 | Kayako SupportSuite syncml/index.php Direct Request Remote Information Disclosure | medium |
| 30052 | boastMachine mail.php id Parameter SQL Injection | high |
| 30021 | BitDefender Update Server HTTP Request Traversal Arbitrary File Access | high |
| 29996 | MyBB forumdisplay.php 'sortby' Parameter Arbitrary PHP Code Execution | high |
| 29995 | Pixelpost index.php parent_id Parameter SQL Injection | medium |
| 29981 | X7 Chat index.php day Parameter SQL Injection | high |
| 29927 | eggBlog index.php eggblogpassword Parameter Cookie SQL Injection | medium |
| 29897 | PortalApp forums.asp sortby Parameter SQL Injection | high |
| 29871 | Web Server Malicious JavaScript Link Detection | critical |
| 29870 | XoopsGallery init_basic.php GALLERY_BASEDIR Parameter Remote File Inclusion | high |
| 29869 | Loudblog loudblog/inc/parse_old.php template Parameter Arbitrary Remote Code Execution | medium |
| 29868 | Newbb_plus Module for RunCMS Client-Ip Header SQL Injection | medium |
| 29867 | RunCMS Detection | info |
| 29854 | Bitweaver wiki/edit.php suck_url Parameter Traversal Source Code Disclosure | medium |
| 29853 | RunCMS Multiple Script lid Parameter SQL Injection | high |
| 29852 | Mort Bay Jetty URL Multiple Slash Character Information Disclosure | medium |
| 29835 | Site@School slideshow_full.php album_name Parameter SQL Injection | medium |
| 29833 | PHP < 4.4.8 Multiple Vulnerabilities | high |
| 29832 | Zenphoto rss.php albumnr Parameter SQL Injection | high |
| 29829 | CMS Made Simple modules/TinyMCE/content_css.php templateid Parameter SQL Injection | high |
| 29802 | CuteNews search.php files_arch Array Arbitrary File Access | medium |
| 29800 | PMOS Help Desk form.php Arbitrary Code Execution | high |
| 29799 | Tikiwiki tiki-listmovies.php movie Parameter Traversal Arbitrary File Access | medium |
| 29746 | Plogger plog-rss.php id Parameter SQL Injection | high |
| 29745 | WordPress 'query.php' is_admin() Function Information Disclosure | medium |
| 29728 | RaidenHTTPD workspace.php ulang Parameter Local File Inclusion | high |
| 29722 | Centreon 'fileOreonConf' Parameter File Include Vulnerabilities | high |
| 29252 | Firefly Media Server Limited Directory Traversal Admin Credential Disclosure | high |
| 29249 | HP OpenView Network Node Manager Multiple CGI Remote Overflows | high |
| 29187 | Plumtree Portal User Object User Enumeration | medium |
| 28375 | Seditio plug.php pag_sub Parameter SQL Injection | medium |
