CVE-2005-2011: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the id parameter in a Question action...

CVE-2005-2007: Undefined Security Weakness

Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. dot dot in the id parameter to the 1 upload or 2 attachment scripts...

CVE-2005-2003: Undefined Security Weakness

Ultimate PHP Board UPB 1.9.6 GOLD allows remote attackers to obtain sensitive information via an invalid zero id parameter to 1 viewtopic.php, 2 profile.php, or 3 newpost.php, which reveals the path in an error message...

CVE-2005-1865

Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL commands via the catview parameter to 1 calweek.php, 2 calcat.php, or 3 calday.php, or 4 id parameter to calpophols.php...

CVE-2005-1839: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 view.asp or 2 print.asp or 3 edit parameter to register.asp...

CVE-2005-1701: Undefined Security Weakness

SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to the 1 News, 2 File, 3 Liens, or 4 Faq modules...

DEBIAN-CVE-2005-1687

SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the tbid parameter...

CVE-2005-1593

Cross-site scripting XSS vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-1594: Undefined Security Weakness

SQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-1593: Undefined Security Weakness

Cross-site scripting XSS vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-1479: Undefined Security Weakness

SQL injection vulnerability in jgsportal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-1509: Undefined Security Weakness

SQL injection vulnerability in profil.php in PwsPHP 1.2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2004-1843

SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to 1 resend.asp or 2 newsview.asp...

CVE-2004-1968

The readmsg action in myhome.php in Open Bulletin Board OpenBB 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter...

CVE-2004-1843: Undefined Security Weakness

SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to 1 resend.asp or 2 newsview.asp...

CVE-2004-1975: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a vulnerability that is closely related to CVE-2004-1551...

CVE-2004-1836: Undefined Security Weakness

SQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier allows remote attackers to execute arbitrary SQL via the id parameter of the comments action...

CVE-2004-1968: Undefined Security Weakness

The readmsg action in myhome.php in Open Bulletin Board OpenBB 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter...

CVE-2004-1911: Undefined Security Weakness

Cross-site scripting XSS vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the 1 l parameter aka language variable to index.php or 2 id parameter to view.php...

CVE-2004-1826: Undefined Security Weakness

SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...