security curmudgeon Apache Tomcat 4.0.3 - Requests Containing MS-DOS Device Names Information Disclosure
remote multiple CVE-2005-4703;OSVDB-20033

Michael Dipper Gallery 2.0 - 'main.php' Directory Traversal
webapps php

rgod w-Agora 4.2.0 - 'quicklist.php' Remote Code Execution
webapps php OSVDB-20058;OSVDB-11252;OSVDB-11240

imready4chillin Accelerated Mortgage Manager - 'Password' SQL Injection
webapps php CVE-2005-3290;OSVDB-21581

Charles Stevenson Solaris 10 (x86) - DtPrintinfo/Session Privilege Escalation
local solaris

RusH phpBB 2.0.13 - 'admin_styles.php' Remote Command Execution
remote linux OSVDB-4278;OSVDB-20161

basher13 RBExplorer 1.0 - Hijacking Command Denial of Service
dos windows

rgod versatileBulletinBoard 1.00 RC2 - Board Takeover (SQL Injection)
webapps php OSVDB-19972;CVE-2005-3259;OSVDB-19964

Ulf Harnhammar Xine-Lib 1.1 - 'Media Player Library' Remote Format String
remote linux OSVDB-19892;CVE-2005-2967

retrogod@aliceposta.it Cyphor 0.19 - 'footer.php?t_login' Cross-Site Scripting
webapps php CVE-2005-3237;OSVDB-19946

retrogod@aliceposta.it Cyphor 0.19 - 'newmsg.php?fid' SQL Injection
webapps php CVE-2005-3236;OSVDB-19944

rgod Cyphor 0.19 - 'lostpwd.php?nick' SQL Injection
webapps php CVE-2005-3236;OSVDB-19943

rgod Cyphor 0.19 - Board Takeover (SQL Injection)
webapps php OSVDB-20983;CVE-2005-3575

Alexander Kornbrust Oracle Forms - Servlet TLS Listener Remote Denial of Service
dos multiple CVE-2005-3207;OSVDB-20063

farhad koosha Aenovo - Multiple Cross-Site Scripting Vulnerabilities
webapps asp OSVDB-19938

farhad koosha Aenovo - '/incs/searchdisplay.asp?strSQL' SQL Injection
webapps asp CVE-2005-3208;OSVDB-19937