Turnkeyforms

12 CVEs across 6 Turnkeyforms products. Browse Turnkeyforms vulnerabilities, severities, and proof-of-concept exploits.

Turnkeyforms products with known CVEs

ProductCVEs
Local Classifieds3
Text Link Sales3
Web Hosting Directory3
Business Survey Pro1
Entertainment Portal1
Yahoo-Answers-Clone1
Turnkeyforms CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2009-48582010-05-11Cross-site scripting (XSS) vulnerability in questiondetail.php in Yahoo Answers Clone allows remote attackers to inject arbitrary web script or HTML via the qu…
CVE-2008-69632009-08-13admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative privileges via a direct request.
CVE-2008-69412009-08-12SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the…
CVE-2008-69402009-08-12TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a…
CVE-2008-69392009-08-12TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or (2…
CVE-2008-67232009-04-14TurnkeyForms Entertainment Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLogged cookie to Admi…
CVE-2008-63512009-03-02Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via t…
CVE-2008-63502009-03-02SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter.
CVE-2008-63492009-03-02SQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers to execute arbitrary SQL commands via th…
CVE-2008-63022009-02-26TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a direct request to Site_Admin/admin.php.
CVE-2008-54872008-12-12Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script or HTML via the id…
CVE-2008-54862008-12-12SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter.