CVE-2006-1694: Undefined Security Weakness

SQL injection vulnerability in members.php in XBrite Members 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-1665: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the 1 adminJump and 2 forummiddle parameters in a forum.php, and the 3 form parameter in b members.php, c pm.php, and d mail.php...

CVE-2005-4642: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 search.php, 2 members.php, 3 stats.php, 4 viewforum.php, 5 register.php, 6 usercp.php, 7 groups.php, 8 pms.php, and 9 calendar.php...

CVE-2005-4642

Multiple cross-site scripting XSS vulnerabilities in HydroBB 1.0.0 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the s parameter to 1 search.php, 2 members.php, 3 stats.php, 4 viewforum.php, 5 register.php, 6 usercp.php, 7 groups.php, 8 pms.php, and 9 calendar.php...

CVE-2005-4516

Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via 1 the sortby parameter in members.php and 2 IMG tags...

CVE-2005-4516: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via 1 the sortby parameter in members.php and 2 IMG tags...

CVE-2005-3688: Undefined Security Weakness

Cross-site scripting XSS vulnerability in members.php in XMB 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Your Current Mood" field in the registration page...

CVE-2004-2437: Undefined Security Weakness

SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to 1 index.php or 2 members.php, or 3 the commentid parameter to comments.php...