Vulnerabilities

TI-2009-04614 CVE-2009-4858 · GHSA-6m5w-rvw6-g5p7

Cross-site scripting (XSS) vulnerability in questiondetail.php in Yahoo Answers Clone…

LOW 23

Cross-site scripting (XSS) vulnerability in questiondetail.php in Yahoo Answers Clone allows remote attackers to inject arbitrary web script or HTML via the questionid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01269 Published 2010-05-10 No fix listed CWE-79

TI-2008-06651 CVE-2008-6963 · GHSA-5qq9-gx5j-vrcm

admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass…

LOW 38

admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative privileges via a direct request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02451 Published 2009-08-13 No fix listed CWE-264

TI-2008-06629 CVE-2008-6941 · GHSA-2476-f5h7-4c25

SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting…

LOW 35

SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0114 Published 2009-08-12 No fix listed CWE-89

TI-2008-06628 CVE-2008-6940 · GHSA-6278-hx27-hmxh

TurnkeyForms Web Hosting Directory stores sensitive information under the web root with…

LOW 38

TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a database backup via a direct request to admin/backup/db.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02844 Published 2009-08-12 No fix listed CWE-264

TI-2008-06627 CVE-2008-6939 · GHSA-hjmw-7h65-p64w

TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and…

LOW 38

TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or (2) gain privileges as another user by setting the logged cooki…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03121 Published 2009-08-12 No fix listed CWE-287

TI-2008-06412 CVE-2008-6723 · GHSA-mr2r-xh4p-qmmp

TurnkeyForms Entertainment Portal 2.0 allows remote attackers to bypass authentication…

LOW 38

TurnkeyForms Entertainment Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLogged cookie to Administrator.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02588 Published 2009-04-14 No fix listed CWE-287

TI-2008-06043 CVE-2008-6351 · GHSA-p3mx-4x63-5qvv

Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local…

LOW 23

Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via the r parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01453 Published 2009-03-02 No fix listed CWE-79

TI-2008-06042 CVE-2008-6350 · GHSA-r4g7-x57h-2jvg

SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows…

LOW 35

SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-03-02 No fix listed CWE-89

TI-2008-06041 CVE-2008-6349 · GHSA-jpp8-xpp4-6mrr

SQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey…

LOW 35

SQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2009-03-02 No fix listed CWE-89

TI-2008-05995 CVE-2008-6302 · GHSA-gv7h-mw85-m8mp

TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain…

LOW 38

TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a direct request to Site_Admin/admin.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02573 Published 2009-02-26 No fix listed CWE-264

TI-2008-05204 CVE-2008-5487 · GHSA-hppr-jh37-qprv

Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales…

LOW 23

Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01571 Published 2008-12-12 No fix listed CWE-79

TI-2008-05203 CVE-2008-5486 · GHSA-5r67-x99x-g9gm

SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote…

LOW 35

SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-12-12 No fix listed CWE-89

Vulnerabilities

Filters