2005

SQL injection vulnerability in gb_new.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the qu

SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname pa

PHP remote file inclusion vulnerability in zpanel.php in ZPanel allows remote attackers to (1) execute arbitrary PHP cod

Novell iChain Mini FTP Server 2.3, and possibly earlier versions, does not limit the number of incorrect logins, which m

Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code

Unknown vulnerabilities in deplate before 0.7.2 have unknown impact, possibly involving elements.rb.

Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allo

Multiple SQL injection vulnerabilities in exoops may allow remote attackers to execute arbitrary SQL commands via (1) th

PHP remote file inclusion vulnerability in The Includer 1.0 and 1.1 allows remote attackers to execute arbitrary PHP cod

SQL injection vulnerability in phpCoin 1.2.1b and earlier allows remote attackers to execute arbitrary SQL commands via

Format string vulnerability in gprostats for GProFTPD before 8.1.9 may allow remote attackers to execute arbitrary code

Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape

Multiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact.

Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands

SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitr

Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded,

Vulnerability in Access_user Class before 1.75 allows local users to gain access as other users via the password "new".

Multiple SQL injection vulnerabilities in AzDGDatingPlatinum 1.1.0 allows remote attackers to execute arbitrary SQL comm

TowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote attackers to obtain the MD5

SQL injection vulnerability in index.php in Invision Power Board 1.3.1 Final and earlier allows remote attackers to exec

Buffer overflow in the Content Advisor in Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execut

GIF file validation error in MSN Messenger 6.2 allows remote attackers in a user's contact list to execute arbitrary cod

SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary S

XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.

SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL

SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary SQ

Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an u

Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact

fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," poss

Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of s

The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel nam

Certain Perl scripts in Konversation 0.15 allow remote attackers to execute arbitrary commands via shell metacharacters

Format string vulnerability in cgi.c for Monkey daemon (monkeyd) before 0.9.1 allows remote attackers to cause a denial

Opera 8 Beta 3, when using first-generation vetted digital certificates, displays the Organizational information of an S

Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote at

SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter fo

The Plugin Finder Service (PFS) in Firefox before 1.0.3 allows remote attackers to execute arbitrary code via a javascri

Buffer overflow in CVS before 1.11.20 allows remote attackers to execute arbitrary code.

Directory traversal vulnerability in the third party tool from Castlehill, as used to secure the iSeries AS/400 FTP serv

Directory traversal vulnerability in the third party tool from Powertech, as used to secure the iSeries AS/400 FTP serve

Directory traversal vulnerability in the third party tool from NetIQ, as used to secure the iSeries AS/400 FTP server, a

Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attac

Multiple directory traversal vulnerabilities in Argosoft Mail Server Pro 1.8.7.6 allow remote authenticated users to (1)

Multiple SQL injection vulnerabilities in BK Forum 4.0 allow remote attackers to execute arbitrary SQL commands via the

Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via

SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL commands via the postid para

The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.

PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code v

include.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.