185 matches found
CVE-2008-3755: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in view.php in YourFreeWorld Classifieds Script allows remote attackers to execute arbitrary SQL commands via the category parameter...
CVE-2008-3754: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3756: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in tr.php in YourFreeWorld Viral Marketing Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3753: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3757: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3750: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3725
SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-3725
CVE-2008-3725 concerns the YourFreeWorld Ad Board Script, specifically the vulnerable file trr.php. The issue is a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by supplying a crafted value for the id parameter. The vulnerability potentially enables pa...
CVE-2008-3725: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
YourFreeWorld Ad-Exchange Script - id SQL Injection
YourFreeWorld Ad-Exchange Script - id SQL Injection source: https://www.securityfocus.com/bid/30762/info YourFreeWorld Ad-Exchange Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...
CVE-2008-2065
CVE-2008-2065 describes an SQL injection in the jokes.php component of the YourFreeWorld Jokes Site Script. The vulnerability allows remote attackers to execute arbitrary SQL commands via the catagorie parameter, potentially compromising data confidentiality, integrity and availability. Affected ...
CVE-2008-2065: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrary SQL commands via the catagorie parameter...
CVE-2008-1919
SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter...
Sql injection
SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter...
CVE-2008-1919
The CVE-2008-1919 entry describes an SQL injection in listtest.php of YourFreeWorld Apartment Search Script, exploitable via the r parameter. The underlying issue is improper input handling in a PHP script leading to arbitrary SQL execution. The vulnerability is remote in scope and affects the li...
CVE-2008-1919
SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter...
CVE-2008-1919: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter...
CVE-2006-6461
tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2508...
CVE-2006-6461
CVE-2006-6461 affects tr1.php in Yourfreeworld Stylish Text Ads Script. The vulnerability allows remote attackers to obtain the installation path via an invalid id parameter, disclosed in an error message. The entry notes this issue may be related to CVE-2006-2508; the provided documents do not i...