Все нижеприведенные данные я вытаскивал из последних, на сегодняшний день версий этих программных продуктов.

1024cms md5($pass) /admin/
/includes/config.php
....[prefix]_users (default prefix otatf_) :
........id
........username
........password
........email

....[prefix]_config:
........adminemail

AIOCP md5($pass) /admin/code/
/shared/config/cp_db_config.php
....[prefix]_users (default prefix aiocp_) :
........user_id
........user_name
........user_email
........user_password
........user_level

bitweaver md5($pass) /users/login.php
/kernel/config_inc.php
....users_users :
........user_id
........email
........login
........hash

bloofoxCMS md5($pass) /admin/
/system/class_mysql.php
....[prefix]_sys_user (default prefix bfCMS_) :
........uid
........username
........password
........groups

ClanTiger md5($pass) /?module=login&action=authenticate
/settings.php
....members :
........id
........accesslevel
........username
........email
........password
........icq

ClanSphere md5($pass) or sha1($pass) (предлагается на выбор при установке) /admin.php
/setup.php
....[prefix]_users (default prefix cs_) :
........users_id
........access_id
........users_nick
........users_pwd
........users_icq
........users_email

CMS Made Simple md5($pass) /admin/login.php
/config.php
....[prefix]_users (default prefix cms_) :
........user_id
........username
........password
........admin_access
........email

Concrete5 /index.php/login
/config/site.php
....Users :
........uID
........uName
........uEmail
........uPassword

Constructr CMS (пасс в открытом виде, точнее какой-то хэш, который используется в качестве пароля, рандомно генериться при установке) /backend/login.php
/data/config/config.inc.php
....constructr_user :
........id
........username
........md5_username
........usermail
........hash
........md5_hash

Contentteller Community Edition /cadmin/
/includes/config.php
....[prefix]_esselbach_ct_users :
........user_id
........user_name
........user_loginname
........user_password
........user_salt
........user_status
........user_email
........user_regemail
........user_icq
........user_editadmin

Diferior md5(md5($pass)) /user/login.html
/conf.php
....[prefix]_private (default prefix dif_) :
........uid
........name
........pass
........email
........status

eazyPortal md5($pass) /index.php
/inc/settings.inc.php
....[prefix]_users :
........uid
........uname
........upwd
........uemail
........upriv

eliteCMS sha1($pass) /admin/login.php
/admin/includes/config.php
....users :
........id
........user_name
........h_password
........s_admin
........email

Elxis md5($pass) /administrator/
/configuration.php
....[prefix]_users (default prefix elx_) :
........id
........name
........username
........email
........password
........usertype
........icq

Enano CMS /index.php
/config.php
....users :
........user_id
........username
........password
........email
........user_level
........temp_password

eoCMS md5($pass) /index.php?act=login
/config.php
....users :
........id
........user
........pass
........email

Exponent md5($pass) /index.php
/conf/config.php
....[prefix]_user (default prefix exponent_) :
........id
........username
........password
........is_admin
........email

Frog sha1($pass) /admin/?/login
/config.php
....[prefix]_user (default no prefix) :
........id
........email
........username
........password

Fundanemt md5($pass) /index.php
/conf/config.php
....[prefix]_fundausers (default no prefix) :
........USERNAME
........PASSWORD
........FULLNAME
........EMAIL

....[prefix]_frontend_users (default no prefix) :
........ID
........USERNAME
........PASSWORD

glFusion md5($pass) /admin/
/private/db-config.php
....[prefix]_users (default prefix gl_) :
........uid
........username
........passwd
........email

html-edit CMS (пароль в открытом виде) /controlpanel/
/config.php
....htmledit_admin :
........id
........naam
........pw

Icy Phoenix md5($pass) /login_ip.php?redirect=adm/index.php
/config.php
....[prefix]_users (default prefix ip_) :
........user_id
........user_active
........username
........user_password
........user_level
........user_email
........user_icq

iGaming CMS md5($pass) /admin/login.php
/config.php
....sp_members :
........ID
........PSEUDO
........PASS
........EMAIL

ImpressCMS /content.php
....[prefix]_users (перфикс рандомно генерится при установке) :
........uid
........email
........user_icq
........pass
........salt
........login_name

Injader md5($pass) /login.php
/data/secure/db_vars.php
....maj_users :
........id
........username
........userpass
........email

Kajona sha1($pass) /admin/
/system/config/config.php
....[prefix]_user (default prefix kajona_) :
........user_id
........user_username
........user_pass
........user_email

Lanius CMS md5($pass) /admin/auth.php
/admin/includes/dbsettings.php
....[prefix]_users (default prefix ld_) :
........id
........username
........email
........password

MDPro md5($pass) /admin.php
/config/md-config.php
....[prefix]_users (default prefix md_) :
........pn_uid
........pn_uname
........pn_email
........pn_user_icq
........pn_pass

MiaCMS md5($pass) /administrator/
/configuration.php
....[prefix]_users (default prefix mia_) :
........id
........username
........email
........password
........usertype

MigasCMS md5($pass) /cms/index.php
/cms/incls/webini.php
....sbc_user :
........id
........uname
........pw
........email
........level

MODx md5($pass) /manager/
/core/config/config.inc.php
....[prefix]_users (default prefix modx_) :
........id
........username
........password

Monkey CMS /admincp/
/admincp/dbdetails.php
....[prefix]_user :
........user_id
........user_name
........user_email
........password

....[prefix]_site_user:
........site_user_id
........site_user_name
........site_user_password
........site_user_email
........admin_user
........salt

ocPortal /adminzone/
/info.php
....[prefix]_f_members (default prefix ocp4_) :
........id
........m_username
........m_pass_hash_salted
........m_pass_salt
........m_email_address

OneCMS /admin.php
/config.php
....onecms_users :
........id
........username
........password
........email
........rank

pecio cms sha1($pass) /admin/
/_configuration.inc.php
....pec_users :
........id
........username
........password
........email
........isuseradmin

Phenotype CMS /_phenotype/admin/
/_config.inc.php
....user :
........usr_id
........usr_status
........usr_login
........usr_pass
........usr_email

PhpMySport md5($pass) /administration/
/include/conf.php
....[prefix]_member (default prefix pms_ =))) :
........member_id
........member_email
........member_login
........member_pass

phpwcms md5($pass) /login.php
/config/phpwcms/dist.conf.inc.php
....[prefix]_user (если при установке оставить поле префикс пустым, то префиксом становится имя БД) :
........usr_id
........usr_login
........usr_pass
........usr_email
........usr_admin

Pixie /admin/
/admin/config.php
....pixie_users :
........user_id
........user_name
........email
........pass

PLUME CMS md5($pass) /manager/login.php
/manager/conf/config.php
....[prefix]_users (default prefix plume_) :
........user_id
........user_username
........user_password
........user_email
........user_pubemail
........user_icq

Shinobu /admin/
/system/core/config.php
....users :
........id
........username
........password
........salt
........hash
........email

SilverStripe /Security/login
/mysite/_config.php
....Member :
........ID
........Email
........Password
........Salt

sNews md5($pass) /login/
/snews.php
....settings :
........username
........password

TangoCMS /index.php
/config/default/config.ini.php
....[prefix]_users (default prefix tcm_) :
........id
........username
........password
........email

Tiki Wiki /tiki-index.php
/db/tiki-db.php
....users_users :
........userId
........email
........login
........password

Tinypug md5($pass) /login
/system/application/config/database.php
....users :
........id
........user_name
........password
........email_address

TRIBiQ /admin/
/siteconfigs/global.php
....[prefix]_admins (default prefix tribiq_) :
........id
........username
........password
........password_salt
........email
........perm_sysadmin

....[prefix]_users :
........id
........username
........password
........email

Triton CMS md5($pass) /admin/
/essentials/config.php
....[prefix]_members (default prefix tc_) :
........id
........group_id
........username
........password
........email

Website Baker md5($pass) /admin/
/config.php
....users :
........user_id
........group_id
........username
........password
........email

P.S. Хорошую идею предложил NaX[no]rT, забить в базу еще и адреса админок к этим CMS, если надумаешь сделать - я допишу пути к этим.

UPD: Добавил пути до админок/форм входа.
UPD1: Добавил пути до конфигов подключения к БД

__________________
Feci, quod potui. Faciant meliora potentes.