CVE-2008-6351

Cross-site scripting XSS vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via the r parameter...

Sql injection

SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter...

CVE-2008-6302

TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a direct request to SiteAdmin/admin.php...

localclassifieds-bypass.txt

============================================================================== / | | || | | \ | | / \ | |/ / | | | || | | | | | | | | | ' / | || | | | | |\ | | || | | . \ | || || | / ||\ ============================================================================== Turnkeyforms Local...

turnkeyforms Local Classifieds Auth Bypass Vulnerability

Exploit for unknown platform in category web applications ======================================================== turnkeyforms Local Classifieds Auth Bypass Vulnerability ========================================================...

TurnkeyForms Local Classifieds - Authentication Bypass

TurnkeyForms Local Classifieds - Authentication Bypass ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...

TurnkeyForms Local Classifieds - Authentication Bypass

============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ============================================================================== / | | || | | \ | | / \ | |/ / | | |...

TurnkeyForms Local Classifieds - Cross-Site Scripting / SQL Injection

Author: TR-ShaRk Web : StarHack.Us OldKral.Com Emai : [email protected] Script : Local Classifieds Turnkeyforms SQL Injection Vuln. : listtest.php?r=-39+union+select+1,@@version-- Xss: listtest.php?r="alertdocument.cookie Demo:...