8 matches found
Programs Rating rate.php id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/35746/info Programs Rating Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...
CVE-2009-4690
Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...
CVE-2009-4690: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...
Programs Rating - 'rate.php?id' Cross-Site Scripting
source: https://www.securityfocus.com/bid/35746/info Programs Rating Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
CVE-2008-3753
SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3753
The CVE-2008-3753 entry affects the YourFreeWorld Programs Rating Script, with a vulnerability in details.php that allows SQL injection through the id parameter. This is described as a remote SQL command execution vulnerability. Connected documents also reference this CVE under various feeds (NVD...
CVE-2008-3753: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter...