CVE-2008-6963

CVE-2008-6963 affects TurnkeyForms Text Link Sales (admin.php). The vulnerability allows remote attackers to bypass authentication and gain administrative privileges through a direct request. Documents describe the flaw and its impact but do not provide a patch version, workaround, or explicit re...

CVE-2008-6963

admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative privileges via a direct request...

CVE-2008-6963: Undefined Security Weakness

admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative privileges via a direct request...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2008-5486

SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5487

Cross-site scripting XSS vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script or HTML via the id parameter...

Sql injection

SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5487

CVE-2008-5487 affects TurnkeyForms Text Link Sales: vulnerable admin.php parameter id enables cross-site scripting (XSS) by injecting arbitrary script/HTML. CVSS 2.0 base score 4.3 (Medium). No remediation details provided in the supplied documents.

CVE-2008-5486

CVE-2008-5486 describes an SQL injection vulnerability in TurnkeyForms Text Link Sales, specifically in admin.php where the id parameter is vulnerable. Exploitation details are not provided in the connected documents; the vulnerability could allow remote attackers to execute arbitrary SQL command...

CVE-2008-5487

Cross-site scripting XSS vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2008-5486

SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5486: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5487: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script or HTML via the id parameter...

textlinksales-sqlxss.txt

turnkeyforms Text Link Sales Remote Sql inj & xss ---------------------------------------------------------- Discovered By: ZoRLu Date: 14.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug number now: 43 my target bug number...

turnkeyforms Text Link Sales (id) XSS/SQL Injection Vulnerability

No description provided by source. turnkeyforms Text Link Sales Remote Sql inj & xss ---------------------------------------------------------- Discovered By: ZoRLu Date: 14.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA : my bug...

TurnkeyForms - Text Link Sales Authentication Bypass

TurnkeyForms - Text Link Sales Authentication Bypass ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

TurnkeyForms Text Link Sales - id Cross-Site Scripting SQL Injection

TurnkeyForms Text Link Sales - id Cross-Site Scripting SQL Injection turnkeyforms Text Link Sales Remote Sql inj & xss ---------------------------------------------------------- Discovered By: ZoRLu Date: 14.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRD...

turnkeyforms Text Link Sales Auth Bypass Vulnerability

No description provided by source. ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ==============================================================================...

turnkeyforms Text Link Sales (id) XSS/SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= turnkeyforms Text Link Sales id XSS/SQL Injection Vulnerability ================================================================= turnkeyforms Text Link Sales Remote Sql inj...

textlink-bypass.txt

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...