CVE-2009-3539

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Ultra Classifieds Pro allow remote attackers to inject arbitrary web script or HTML via the 1 cname parameter to subclass.php and the 2 sn parameter to listads.php...

CVE-2009-3540

Cross-site scripting XSS vulnerability in listads.php in YourFreeWorld Ultra Classifieds Pro allows remote attackers to inject arbitrary web script or HTML via the cn parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-3539

CVE-2009-3539 describes multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Ultra Classifieds Pro. The flaws allow remote attackers to inject arbitrary web script or HTML via the (1) cname parameter to subclass.php and (2) sn parameter to listads.php. The associated NVD metrics i...

CVE-2008-4900

SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4895

SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4882

SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4884

SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4886

SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the c parameter...

Sql injection

SQL injection vulnerability in tr.php in YourFreeWorld Reminder Service Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the c parameter...

Sql injection

SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4895

The CVE-2008-4895 entry relates to a SQL injection vulnerability in tr.php of the YourFreeWorld Downline Builder, allowing remote attackers to execute arbitrary SQL commands via the id parameter. According to the NVD entry, it has a CVSSv2 base score of 7.5 (HIGH) with network attack vector, low ...

CVE-2008-4900

The connected records describe CVE-2008-4900 as a SQL injection in tr.php of the YourFreeWorld Classifieds Blaster Script, exploitable remotely via the id parameter to execute arbitrary SQL commands. The NVD CVSSv2 base score is 7.5 (HIGH) with network attack vector, low attack complexity, no aut...

CVE-2008-4900

SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4895

SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4884

CVE-2008-4884 describes a SQL injection in tr.php of the YourFreeWorld Classifieds Hosting Script, exploitable via the id parameter to allow remote SQL command execution. The vulnerability is evidenced by multiple trusted sources (NVD/NIST and CVE listings) confirming an injection flaw with a hig...

CVE-2008-4884

SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter...