Search vulnerabilities

Results 3

Export CSV
CVE-2006-6461

tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2508.

CVSS 2.0 · 7.8 High EPSS 1.6% KEV · Not listed
Vendors
CVE-2008-3754

SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
CVE-2006-2508

SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php.

CVSS 2.0 · 6.4 Medium EPSS 2.6% KEV · Not listed
Vendors