Vulnerabilities

TI-2008-06373 CVE-2008-6684 · GHSA-5rx6-m8fr-g79v

Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows…

LOW 35

Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote attackers to execute arbitrary code by uploading a file with an executable extension and a GIF header, then accessing this…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02628 Published 2009-04-10 No fix listed CWE-20

TI-2008-06372 CVE-2008-6683 · GHSA-6hch-27v6-92r6

Cross-site scripting (XSS) vulnerability in listtest.php in Apartment Search Script…

LOW 23

Cross-site scripting (XSS) vulnerability in listtest.php in Apartment Search Script allows remote attackers to inject arbitrary web script or HTML via the r parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01445 Published 2009-04-10 No fix listed CWE-79

TI-2008-01843 CVE-2008-1919 · GHSA-48c6-58v7-72hf

SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script…

LOW 37

SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02005 Published 2008-04-22 No fix listed CWE-89

Vulnerabilities

Filters

Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows…

Cross-site scripting (XSS) vulnerability in listtest.php in Apartment Search Script…

SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script…