160 matches found
CVE-2008-3757
SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3753
The CVE-2008-3753 entry affects the YourFreeWorld Programs Rating Script, with a vulnerability in details.php that allows SQL injection through the id parameter. This is described as a remote SQL command execution vulnerability. Connected documents also reference this CVE under various feeds (NVD...
CVE-2008-3752
CVE-2008-3752 describes a SQL injection in tr.php of the YourFreeWorld Ad-Exchange Script, allowing remote attackers to execute arbitrary SQL commands through the id parameter. The issue is confirmed in multiple sources (NVD entry with CVSS v2 base score 7.5, high impact: partial confidentiality,...
CVE-2008-3750
The CVE-2008-3750 entry concerns a SQL injection in the YourFreeWorld URL Rotator Script, specifically in tr.php, where the id parameter can be exploited to execute arbitrary SQL commands. Affected component is the tr.php script of the YourFreeWorld URL Rotator; vulnerability type is SQL injectio...
CVE-2008-3752
SQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3725
SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3725
CVE-2008-3725 concerns the YourFreeWorld Ad Board Script, specifically the vulnerable file trr.php. The issue is a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by supplying a crafted value for the id parameter. The vulnerability potentially enables pa...
YourFreeWorld Ad-Exchange Script - id SQL Injection
YourFreeWorld Ad-Exchange Script - id SQL Injection source: https://www.securityfocus.com/bid/30762/info YourFreeWorld Ad-Exchange Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...
CVE-2008-2065
CVE-2008-2065 describes an SQL injection in the jokes.php component of the YourFreeWorld Jokes Site Script. The vulnerability allows remote attackers to execute arbitrary SQL commands via the catagorie parameter, potentially compromising data confidentiality, integrity and availability. Affected ...
CVE-2008-1919
SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter...
Sql injection
SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter...
CVE-2008-1919
The CVE-2008-1919 entry describes an SQL injection in listtest.php of YourFreeWorld Apartment Search Script, exploitable via the r parameter. The underlying issue is improper input handling in a PHP script leading to arbitrary SQL execution. The vulnerability is remote in scope and affects the li...
CVE-2008-1919
SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter...
CVE-2006-6461
tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2508...
CVE-2006-6461
CVE-2006-6461 affects tr1.php in Yourfreeworld Stylish Text Ads Script. The vulnerability allows remote attackers to obtain the installation path via an invalid id parameter, disclosed in an error message. The entry notes this issue may be related to CVE-2006-2508; the provided documents do not i...
CVE-2006-6461
tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2508...
CVE-2006-2508
SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php...
CVE-2006-2510
CVE-2006-2510 is an XSS vulnerability in the URL submission form of YourFreeWorld.com Short Url & Url Tracker Script. The issue allows remote attackers to inject arbitrary web script or HTML via an unspecified URL submission form. The connected documents do not provide explicit product version, e...
Yourfreeworld Styleish Text Ads Script
Homepage of script http://www.yourfreeworld.com/script/textads.asp Stylish Text Ads Script can be one of the most useful tools for any webmaster. If you own 1 or more websites and want to sell text ads then this tool can be one of the best tool for you. Effected files: tr1.php advertise.php...