Vulnerabilities

TI-2008-06043 CVE-2008-6351 · GHSA-p3mx-4x63-5qvv

Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local…

LOW 23

Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via the r parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01453 Published 2009-03-02 No fix listed CWE-79

TI-2008-06042 CVE-2008-6350 · GHSA-r4g7-x57h-2jvg

SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows…

LOW 35

SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-03-02 No fix listed CWE-89

TI-2008-05995 CVE-2008-6302 · GHSA-gv7h-mw85-m8mp

TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain…

LOW 38

TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a direct request to Site_Admin/admin.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02573 Published 2009-02-26 No fix listed CWE-264

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local…

SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows…

TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain…