Filtered by vendor Yourfreeworld Subscriptions
Total 30 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2008-3750 1 Yourfreeworld 1 Url Rotator Script 2017-09-29 N/A
SQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3749 1 Yourfreeworld 1 Banner Management Script 2017-09-29 N/A
SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3725 1 Yourfreeworld 1 Ad Board Script 2017-09-29 N/A
SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-2065 1 Yourfreeworld 1 Jokes Site Script 2017-09-29 N/A
SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrary SQL commands via the catagorie parameter.
CVE-2008-1919 1 Yourfreeworld 1 Apartment Search Script 2017-09-29 N/A
SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter.
CVE-2010-4981 1 Yourfreeworld 1 Banner Management 2017-08-29 N/A
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.
CVE-2009-4690 1 Yourfreeworld 1 Programs Rating Script 2017-08-17 N/A
Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rate.php and (2) postcomments.php.
CVE-2008-3753 1 Yourfreeworld 1 Programs Rating Script 2017-08-08 N/A
SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-3752 1 Yourfreeworld 1 Ad-exchange Script 2017-08-08 N/A
SQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2006-6461 1 Yourfreeworld 1 Stylish Text Ads Script 2017-07-29 N/A
tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2508.