Vendor/product archive

turnkeyforms / local_classifieds CVEs

Beta · best-effort

3 CVEs tagged to turnkeyforms / local_classifieds — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to turnkeyforms vendor archive

CVE-2008-6351

Published Mar 2, 2009

Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via the r parameter.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2008-6350

Published Mar 2, 2009

SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2008-6302

Published Feb 26, 2009

TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a direct request to Site_Admin/admin.php.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1