Some time ago I ran across a script that reported outdated/insecure versions of Joomla, Drupal, WordPress, OS Commerce, etc on a server. It did this by traversing the file system and looking for common signatures in them. Now I cannot find it, though I would both like to use and contribute to it.
The perfect use case would be a server that you are asked to "secure" with hundreds of user uploaded sites (not likely patched or maintained). Or a shared server a previous admin is turning over to you, which you want to identify old packages before the get hacked.
Any suggestions, or ideas? My numerous searches turn up mostly penetration testers, where as I want something that looks at the filesystem for outdated or vulnerable packages.