Vulnerabilities

TI-2008-06629 CVE-2008-6941 · GHSA-2476-f5h7-4c25

SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting…

LOW 35

SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0114 Published 2009-08-12 No fix listed CWE-89

TI-2008-06628 CVE-2008-6940 · GHSA-6278-hx27-hmxh

TurnkeyForms Web Hosting Directory stores sensitive information under the web root with…

LOW 38

TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a database backup via a direct request to admin/backup/db.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02844 Published 2009-08-12 No fix listed CWE-264

TI-2008-06627 CVE-2008-6939 · GHSA-hjmw-7h65-p64w

TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and…

LOW 38

TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or (2) gain privileges as another user by setting the logged cooki…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03121 Published 2009-08-12 No fix listed CWE-287

Vulnerabilities

Filters

SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting…

TurnkeyForms Web Hosting Directory stores sensitive information under the web root with…

TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and…