JChristophFuchs TWiki TWikiUsers - INCLUDE Function Arbitrary Command Execution
webapps php CVE-2005-2877;OSVDB-19403

rgod PHP-Fusion 6.00.109 - 'msg_send' SQL Injection
webapps php OSVDB-19718;CVE-2005-3157

X1ngBox LucidCMS 2.0 - 'index.php' Cross-Site Scripting
webapps php CVE-2005-3127;OSVDB-19743

Nicolas Gregoire Barracuda Spam Firewall < 3.1.18 - Command Execution (Metasploit)
webapps cgi OSVDB-19279;CVE-2005-2848;CVE-2005-2847

X1ngBox CMS Made Simple 0.10 - 'index.php' Cross-Site Scripting
webapps php CVE-2005-3083;OSVDB-19725

rgod MailGust 1.9 - Board Takeover (SQL Injection)
webapps php OSVDB-19679;CVE-2005-3063

rgod PHPMyFAQ 1.5.1 - Multiple Cross-Site Scripting Vulnerabilities
webapps php

rgod phpMyFAQ 1.5.1 - 'User-Agent' Remote Shell Injection
webapps php OSVDB-19673;CVE-2005-3048;OSVDB-19669

rgod My Little Forum 1.5 - 'SearchString' SQL Injection
webapps php OSVDB-19650;CVE-2005-3045

rgod PHP Advanced Transfer Manager 1.30 - Multiple Cross-Site Scripting Vulnerabilities
webapps php

rgod PHP Advanced Transfer Manager 1.30 - Multiple Directory Traversal Vulnerabilities
webapps php

Rajesh Sethumadhavan Hesk 0.92/0.93 - Session ID Authentication Bypass
webapps php CVE-2005-3005;OSVDB-19572

David Sopas Ferreira MX Shop 3.2 - 'index.php' Multiple SQL Injections
webapps php CVE-2005-3004;OSVDB-19611

deluxe@security-project.org vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/template.php' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2005-3020;OSVDB-19543

deluxe@security-project.org vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/modlog.php?orderby' Cross-Site Scripting
webapps php CVE-2005-3020;OSVDB-19542

deluxe@security-project.org vBulletin 1.0.1 lite/2.x/3.0 - '/admincp/language.php?goto' Cross-Site Scripting
webapps php CVE-2005-3020;OSVDB-19541