CVE-2023-28838 GLPI vulnerable to SQL injection through dynamic reports

GLPI is a free asset and IT management software package. Starting in version 0.50 and prior to versions 9.5.13 and 10.0.7, a SQL Injection vulnerability allow users with access rights to statistics or reports to extract all data from database and, in some cases, write a webshell on the server...

BKWorks ProPHP 0.50b1 - Authentication Bypass

BKWorks ProPHP 0.50 Beta 1 Auth Bypass SQL Injection + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Dork : Powered by BKWorks ProPHP Version 0.50 Beta 1 + SQL Injection Login Bypass - Login as : Username : admin ' or ' 1=1 Password : anything or nothing And you will be logged...

CVE-2003-0648

Multiple buffer overflows in vfte, based on FTE, before 0.50, allow local users to execute arbitrary code...