Versions 1.2.13 through 1.2.16 are vulnerable to a SQL injection attack if an attacker can gain access to administrative credentials. This vuln was fixed in 1.2.17.
320419705ca13a1bfcafc3cda1ab534c90225edc3090390aa620b065772e9291
SMF version 2.0.4 suffers from a remote PHP code injection vulnerability.
fb1fdb9f88f7a10a68b514edae1cd6ba816517347156676b1a236c8ed23c784b
osCommerce version 2.3.3 suffers from a cross site request forgery vulnerability.
6899dfd0aba24fae96fc8aca3b04644601579d6527c6c1b6a86f31ffeb009ade
GetSimple version 3.1.2 suffers from authentication bypass and remote code execution vulnerabilities.
999e5026f6a4d4013284f6b65319eaceb75847c3e9cf7b3ae5e9dec3d846289c