newbug@chroot.org AWStats 5.x/6.x - 'Logfile' Remote Command Execution
webapps cgi

John Cobb osCommerce 2.2 - 'Contact_us.php' Cross-Site Scripting
webapps php

RedTeam Pentesting CitrusDB 0.3.6 - Arbitrary Local PHP File Inclusion
webapps php CVE-2005-0411;OSVDB-13786

waraxe PHP-Nuke 6.x/7.x - Multiple Cross-Site Scripting Vulnerabilities
webapps php

RedTeam Pentesting CitrusDB 0.3.6 - 'importcc.php' CSV File SQL Injection
webapps php CVE-2005-0410;OSVDB-13785

RedTeam Pentesting CitrusDB 0.3.6 - 'uploadcc.php' Arbitrary Database Injection
webapps php CVE-2005-0409;OSVDB-13784

RedTeam Pentesting CitrusDB 0.3.6 - 'importcc.php' Arbitrary Database Injection
webapps php CVE-2005-0409;OSVDB-13783

AL3NDALEEB vBulletin 3.0.4 - 'forumdisplay.php' Code Execution (2)
webapps php OSVDB-14026;CVE-2005-0429

John Cobb Brooky CubeCart 2.0.1/2.0.4 - 'index.php?language' Traversal Arbitrary File Access
webapps php CVE-2005-0442;OSVDB-14063

John Cobb Brooky CubeCart 2.0.1/2.0.4 - 'index.php?language' Cross-Site Scripting
webapps php CVE-2005-0443;OSVDB-14062

GHC AWStats 5.x/6.x - Debug Remote Information Disclosure
webapps cgi

AL3NDALEEB vBulletin 3.0.4 - 'forumdisplay.php' Code Execution (1)
webapps php OSVDB-14026;CVE-2005-0429

Zeelock MercuryBoard 1.1.1 - SQL Injection
webapps php OSVDB-13267;CVE-2005-0414

GHC Chipmunk Forums - SQL Injection
webapps php OSVDB-13568

GHC CMScore - SQL Injection
webapps php OSVDB-13573;CVE-2005-0368

GHC MyPHP Forum 1.0 - SQL Injection
webapps php OSVDB-13679;CVE-2005-0413