Turnkeyforms - vulnerabilities (CVEs)

12 CVEs in 6 products, 0 in the last 30 days, newest from 2010-05-11.

Products

Newest CVEs of Turnkeyforms

CVE-2009-4858 - CVSS 4.3 (medium), 2010-05-11: Cross-site scripting (XSS) vulnerability in questiondetail.php in Yahoo Answers Clone allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2008-6963 - CVSS 7.5 (high), 2009-08-13: admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative privileges via a direct request.
CVE-2008-6939 - CVSS 7.5 (high), 2009-08-12: TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or…
CVE-2008-6941 - CVSS 7.5 (high), 2009-08-12: SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the…
CVE-2008-6940 - CVSS 7.5 (high), 2009-08-12: TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a…
CVE-2008-6723 - CVSS 7.5 (high), 2009-04-14: TurnkeyForms Entertainment Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLogged cookie to…
CVE-2008-6351 - CVSS 4.3 (medium), 2009-03-02: Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via…
CVE-2008-6349 - CVSS 7.5 (high), 2009-03-02: SQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers to execute arbitrary SQL commands via…
CVE-2008-6350 - CVSS 7.5 (high), 2009-03-02: SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter.
CVE-2008-6302 - CVSS 7.5 (high), 2009-02-26: TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a direct request to Site_Admin/admin.php.
CVE-2008-5486 - CVSS 7.5 (high), 2008-12-12: SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-5487 - CVSS 4.3 (medium), 2008-12-12: Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script or HTML via the…