CVE-2009-4690

The CVE-2009-4690 entry concerns YourFreeWorld Programs Rating Script with two XSS vulnerabilities. Affected component: rating functionality that reads the id parameter in rate.php and postcomments.php. Root cause: reflected cross-site scripting that allows remote attackers to inject arbitrary we...

CVE-2008-3753

The CVE-2008-3753 entry affects the YourFreeWorld Programs Rating Script, with a vulnerability in details.php that allows SQL injection through the id parameter. This is described as a remote SQL command execution vulnerability. Connected documents also reference this CVE under various feeds (NVD...