CryptoLog Unauthenticated RCE via SQL Injection and Command Injection
All PHP-based releases prior to the ASP.NET rewrite in 2009