EUVD-2008-4860

Malware in sbrugna...

EUVD-2008-4865

Malware in sbrugna...

EUVD-2008-4879

Malware in sbrugna...

EUVD-2008-3738

Malware in sbrugna...

EUVD-2008-1919

Malware in sbrugna...

EUVD-2009-4654

Malware in sbrugna...

CVE-2008-3754

SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-3540

Cross-site scripting XSS vulnerability in listads.php in YourFreeWorld Ultra Classifieds Pro allows remote attackers to inject arbitrary web script or HTML via the cn parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-3539

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HTML via the 1 cname parameter to subclass.php and the 2 sn parameter to listads.php...

YourFreeWorld Ad-Exchange Script 'id' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30762/info YourFreeWorld Ad-Exchange Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

YourFreeWorld Short Url & Url Tracker (id) SQL Injection Vuln

No description provided by source. Short Url & Url Tracker id Remote SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.yourfreeworld.com/script/shorturl.php DorK : inurl:tr.php?id= Short Url & Url Tracker Exploit :...

CVE-2010-4981

SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4981

SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-4981

The CVE-2010-4981 entry describes a SQL injection in YourFreeWorld Banner Management, via trackads.php, where the id parameter is not properly sanitized, allowing remote attackers to execute arbitrary SQL commands. Affected component/file: trackads.php in YourFreeWorld Banner Management. Impact: ...

CVE-2009-4690

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...

CVE-2009-4690

The CVE-2009-4690 entry concerns YourFreeWorld Programs Rating Script with two XSS vulnerabilities. Affected component: rating functionality that reads the id parameter in rate.php and postcomments.php. Root cause: reflected cross-site scripting that allows remote attackers to inject arbitrary we...

Cross site scripting

Cross-site scripting XSS vulnerability in listads.php in YourFreeWorld Ultra Classifieds Pro allows remote attackers to inject arbitrary web script or HTML via the cn parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-3540

The CVE corresponds to a cross-site scripting (XSS) vulnerability in listads.php of YourFreeWorld Ultra Classifieds Pro, exploitable via the cn parameter to inject arbitrary script/HTML. The description notes remote exploit with no confirmed proof-of-exploit elsewhere in the provided documents. N...