CVE-2009-3539

CVE-2009-3539 describes multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Ultra Classifieds Pro. The flaws allow remote attackers to inject arbitrary web script or HTML via the (1) cname parameter to subclass.php and (2) sn parameter to listads.php. The associated NVD metrics i...

CVE-2009-3540

The CVE corresponds to a cross-site scripting (XSS) vulnerability in listads.php of YourFreeWorld Ultra Classifieds Pro, exploitable via the cn parameter to inject arbitrary script/HTML. The description notes remote exploit with no confirmed proof-of-exploit elsewhere in the provided documents. N...