IndexScript version 3.0 suffers from a remote SQL injection vulnerability in sug_cat.php.

Globsy versions 1.0 and below remote file rewriting exploit.

Proof of concept code that demonstrates how an Oracle DB user which has been granted CREATE ANY DIRECTORY can use that system privilege to grant themselves the SYSDBA system privilege by creating a DIRECTORY pointing to the password file location on the OS and then overwriting it with a previously prepared known binary password file using UTL_FILE.PUT_RAW from within the DB.

LokiCMS versions 0.3.4 and below remote command execution exploit.

Loki CMS version 0.3.4 create local file inclusion exploit that uses admin.php.

Loki CMS versions 0.3.4 and below arbitrary check file exploit that uses index.php.

My PHP Indexer version 1.0 suffers from a local file download vulnerability in index.php.

Real Estate Scripts 2008 suffers from a remote SQL injection vulnerability in index.php.

Zomplog version 3.9 suffers from a cross site scripting vulnerability.

phpRS version 2.8.0 suffers from a remote SQL injection vulnerability in kforum.php.