92 matches found
CVE-2008-6350
CVE-2008-6350 defines an SQL injection vulnerability in listtest.php of TurnkeyForms Local Classifieds. The flaw allows remote attackers to inject SQL via the r parameter and execute arbitrary commands, with a CVSS2 base score of 7.5 (HIGH) and network/low complexity conditions. Affected componen...
CVE-2008-6349
SQL injection vulnerability in surveyresultstext.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6351
Cross-site scripting XSS vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via the r parameter...
CVE-2008-6350
SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter...
CVE-2008-6349
CVE-2008-6349 : SQL injection in survey_results_text.php of TurnkeyForms Business Survey Pro 1.0 via the id parameter. Remote attacker could execute arbitrary SQL commands. Affected: TurnkeyForms Business Survey Pro 1.0 (survey_results_text.php). Root cause: improper handling of user-supplied id ...
CVE-2008-6351: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via the r parameter...
CVE-2008-6350: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter...
CVE-2008-6349: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in surveyresultstext.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6302
TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a direct request to SiteAdmin/admin.php...
CVE-2008-6302
TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a direct request to SiteAdmin/admin.php...
CVE-2008-6302
TurnkeyForms Local Classifieds (CVE-2008-6302) is affected by an authentication bypass in Site_Admin/admin.php, allowing remote attackers to gain administrative access. CVSS v2 base score 7.5 (NETWORK, LOW complexity, no auth). Exploitation references exist (Exploit-DB, X-Force, Secunia, etc.). O...
CVE-2008-6302: Undefined Security Weakness
TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a direct request to SiteAdmin/admin.php...
Cross site scripting
Cross-site scripting XSS vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2008-5487
Cross-site scripting XSS vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2008-5486
SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-5486
CVE-2008-5486 describes an SQL injection vulnerability in TurnkeyForms Text Link Sales, specifically in admin.php where the id parameter is vulnerable. Exploitation details are not provided in the connected documents; the vulnerability could allow remote attackers to execute arbitrary SQL command...
CVE-2008-5487
CVE-2008-5487 affects TurnkeyForms Text Link Sales: vulnerable admin.php parameter id enables cross-site scripting (XSS) by injecting arbitrary script/HTML. CVSS 2.0 base score 4.3 (Medium). No remediation details provided in the supplied documents.