EUVD-2008-3743

Malware in sbrugna...

CVE-2008-4885

CVE-2008-4885 is an SQL injection in the file tr1.php of the YourFreeWorld Scrolling Text Ads Script. The vulnerability lets remote attackers send a crafted id parameter to execute arbitrary SQL commands. The NVD CVSS2 base score is 7.5 (HIGH) with network attack vector, low complexity, no authen...

CVE-2008-4885: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3757

CVE-2008-3757 concerns a SQL injection in the file tr1.php of the YourFreeWorld Forced Matrix Script. The vulnerability is triggered via the id parameter, enabling remote attackers to execute arbitrary SQL commands. This is documented across multiple sources in the connected documents, confirming...

CVE-2008-3757: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

stylishtextads-sql.txt

|| | | Stylish Text Ads id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :http://www.yourfreeworld.com/script/textads.php | | DorK :...

scrolltext-sql.txt

|| | | Scrolling Text Ads id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :http://www.yourfreeworld.com/script/scrollingads.php | | DorK :...

CVE-2006-6461: Undefined Security Weakness

tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2508...

Sql injection

SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php...

CVE-2006-2508

CVE-2006-2508 describes a SQL injection vulnerability in tr1.php of YourFreeWorld.com Stylish Text Ads Script, allowing remote attackers to execute arbitrary SQL commands via the id parameter, with a potential involvement of advertise.php. The description and metrics indicate a network-exposed vu...

CVE-2006-2508: Undefined Security Weakness

SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php...