Записи yourfreeworld
30 опубликованных записей вендора yourfreeworld.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 24
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')21
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-20 Improper Input Validation1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
30 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
31Наблюдать | CVE-2008-4886Proof of concept | SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbitrary SQL commands viayourfreeworld · shopping cart script · CWE-89 | Высокая7,5 | — | 2,4 % | 3 нояб. 2008 г. |
31Наблюдать | CVE-2008-1919Proof of concept | SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commanyourfreeworld · apartment search script · CWE-89 | Высокая7,5 | — | 2,0 % | 23 апр. 2008 г. |
31Наблюдать | CVE-2006-6461Эксплойта нет | tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which yourfreeworld · stylish text ads script | Высокая7,8 | — | 1,6 % | 11 дек. 2006 г. |
30Наблюдать | CVE-2008-3757Эксплойта нет | SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via tyourfreeworld · forced matrix script · CWE-89 | Высокая7,5 | — | 1,3 % | 21 авг. 2008 г. |
30Наблюдать | CVE-2008-3751Эксплойта нет | SQL injection vulnerability in tr.php in YourFreeWorld Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commayourfreeworld · short url and url tracker script · CWE-89 | Высокая7,5 | — | 1,3 % | 21 авг. 2008 г. |
30Наблюдать | CVE-2008-3749Proof of concept | SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands viyourfreeworld · banner management script · CWE-89 | Высокая7,5 | — | 1,2 % | 21 авг. 2008 г. |
30Наблюдать | CVE-2008-3753Эксплойта нет | SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commandsyourfreeworld · programs rating script · CWE-89 | Высокая7,5 | — | 1,2 % | 21 авг. 2008 г. |
30Наблюдать | CVE-2008-3755Proof of concept | SQL injection vulnerability in view.php in YourFreeWorld Classifieds Script allows remote attackers to execute arbitrary SQL commands via thyourfreeworld · classifieds · CWE-89 | Высокая7,5 | — | 1,1 % | 21 авг. 2008 г. |
30Наблюдать | CVE-2008-3756Proof of concept | SQL injection vulnerability in tr.php in YourFreeWorld Viral Marketing Script allows remote attackers to execute arbitrary SQL commands via yourfreeworld · viral marketing script · CWE-89 | Высокая7,5 | — | 1,1 % | 21 авг. 2008 г. |
30Наблюдать | CVE-2006-2509Эксплойта нет | SQL injection vulnerability in login.php in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQyourfreeworld · short url and url tracker script | Высокая7,5 | — | 1,1 % | 22 мая 2006 г. |
30Наблюдать | CVE-2008-4895Proof of concept | SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL commands via the idyourfreeworld · downline builder script · CWE-89 | Высокая7,5 | — | 1,1 % | 3 нояб. 2008 г. |
30Наблюдать | CVE-2008-4885Proof of concept | SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arbitrary SQL commands yourfreeworld · scrolling text ads script · CWE-89 | Высокая7,5 | — | 1,0 % | 3 нояб. 2008 г. |
30Наблюдать | CVE-2008-4883Proof of concept | SQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote attackers to execute arbitrary SQL commands via theyourfreeworld · blog blaster script · CWE-89 | Высокая7,5 | — | 1,0 % | 3 нояб. 2008 г. |
30Наблюдать | CVE-2008-3725Proof of concept | SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the idyourfreeworld · ad board script · CWE-89 | Высокая7,5 | — | 1,0 % | 20 авг. 2008 г. |
30Наблюдать | CVE-2010-4981Proof of concept | SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands viayourfreeworld · banner management · CWE-89 | Высокая7,5 | — | 1,0 % | 1 нояб. 2011 г. |
30Наблюдать | CVE-2008-3750Proof of concept | SQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers to execute arbitrary SQL commands via the yourfreeworld · url rotator script · CWE-89 | Высокая7,5 | — | 1,0 % | 21 авг. 2008 г. |
30Наблюдать | CVE-2008-4900Proof of concept | SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arbitrary SQL commands yourfreeworld · classifieds blaster script · CWE-89 | Высокая7,5 | — | 1,0 % | 3 нояб. 2008 г. |
30Наблюдать | CVE-2008-4882Proof of concept | SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute arbitrary SQL commandyourfreeworld · autoresponder hosting script · CWE-89 | Высокая7,5 | — | 1,0 % | 3 нояб. 2008 г. |
30Наблюдать | CVE-2008-3752Proof of concept | SQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers to execute arbitrary SQL commands via the yourfreeworld · ad-exchange script · CWE-89 | Высокая7,5 | — | 1,0 % | 21 авг. 2008 г. |
30Наблюдать | CVE-2008-4881Proof of concept | SQL injection vulnerability in tr.php in YourFreeWorld Reminder Service Script allows remote attackers to execute arbitrary SQL commands viayourfreeworld · reminder service script · CWE-89 | Высокая7,5 | — | 1,0 % | 3 нояб. 2008 г. |
30Наблюдать | CVE-2008-4884Proof of concept | SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arbitrary SQL commands yourfreeworld · classifieds hosting script · CWE-89 | Высокая7,5 | — | 1,0 % | 3 нояб. 2008 г. |
30Наблюдать | CVE-2008-2065Proof of concept | SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrary SQL commands via thyourfreeworld · jokes site script · CWE-89 | Высокая7,5 | — | 1,0 % | 2 мая 2008 г. |
30Наблюдать | CVE-2008-3754Proof of concept | SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands viyourfreeworld · stylish text ads script · CWE-89 | Высокая7,5 | — | 1,0 % | 21 авг. 2008 г. |
28Наблюдать | CVE-2008-6684Эксплойта нет | Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote attackers to execute arbitrary code by uployourfreeworld · apartment search script · CWE-20 | Средняя6,8 | — | 2,6 % | 10 апр. 2009 г. |
27Наблюдать | CVE-2006-2510Эксплойта нет | Cross-site scripting (XSS) vulnerability in the URL submission form in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackyourfreeworld · short url and url tracker script | Средняя6,8 | — | 1,3 % | 22 мая 2006 г. |
- CVE-2008-488631Наблюдать
SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %yourfreeworld · shopping cart script3 нояб. 2008 г.
- CVE-2008-191931Наблюдать
SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL comman
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %yourfreeworld · apartment search script23 апр. 2008 г.
- CVE-2006-646131Наблюдать
tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which
ВысокаяCVSS 7,8Эксплойта нетEPSS 2 %yourfreeworld · stylish text ads script11 дек. 2006 г.
- CVE-2008-375730Наблюдать
SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via t
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %yourfreeworld · forced matrix script21 авг. 2008 г.
- CVE-2008-375130Наблюдать
SQL injection vulnerability in tr.php in YourFreeWorld Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL comma
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %yourfreeworld · short url and url tracker script21 авг. 2008 г.
- CVE-2008-374930Наблюдать
SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands vi
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · banner management script21 авг. 2008 г.
- CVE-2008-375330Наблюдать
SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %yourfreeworld · programs rating script21 авг. 2008 г.
- CVE-2008-375530Наблюдать
SQL injection vulnerability in view.php in YourFreeWorld Classifieds Script allows remote attackers to execute arbitrary SQL commands via th
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · classifieds21 авг. 2008 г.
- CVE-2008-375630Наблюдать
SQL injection vulnerability in tr.php in YourFreeWorld Viral Marketing Script allows remote attackers to execute arbitrary SQL commands via
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · viral marketing script21 авг. 2008 г.
- CVE-2006-250930Наблюдать
SQL injection vulnerability in login.php in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQ
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %yourfreeworld · short url and url tracker script22 мая 2006 г.
- CVE-2008-489530Наблюдать
SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL commands via the id
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · downline builder script3 нояб. 2008 г.
- CVE-2008-488530Наблюдать
SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arbitrary SQL commands
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · scrolling text ads script3 нояб. 2008 г.
- CVE-2008-488330Наблюдать
SQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote attackers to execute arbitrary SQL commands via the
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · blog blaster script3 нояб. 2008 г.
- CVE-2008-372530Наблюдать
SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · ad board script20 авг. 2008 г.
- CVE-2010-498130Наблюдать
SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · banner management1 нояб. 2011 г.
- CVE-2008-375030Наблюдать
SQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers to execute arbitrary SQL commands via the
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · url rotator script21 авг. 2008 г.
- CVE-2008-490030Наблюдать
SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arbitrary SQL commands
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · classifieds blaster script3 нояб. 2008 г.
- CVE-2008-488230Наблюдать
SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute arbitrary SQL command
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · autoresponder hosting script3 нояб. 2008 г.
- CVE-2008-375230Наблюдать
SQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers to execute arbitrary SQL commands via the
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · ad-exchange script21 авг. 2008 г.
- CVE-2008-488130Наблюдать
SQL injection vulnerability in tr.php in YourFreeWorld Reminder Service Script allows remote attackers to execute arbitrary SQL commands via
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · reminder service script3 нояб. 2008 г.
- CVE-2008-488430Наблюдать
SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arbitrary SQL commands
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · classifieds hosting script3 нояб. 2008 г.
- CVE-2008-206530Наблюдать
SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrary SQL commands via th
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · jokes site script2 мая 2008 г.
- CVE-2008-375430Наблюдать
SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands vi
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %yourfreeworld · stylish text ads script21 авг. 2008 г.
- CVE-2008-668428Наблюдать
Unrestricted file upload vulnerability in editimage.php in Apartment Search Script allows remote attackers to execute arbitrary code by uplo
СредняяCVSS 6,8Эксплойта нетEPSS 3 %yourfreeworld · apartment search script10 апр. 2009 г.
- CVE-2006-251027Наблюдать
Cross-site scripting (XSS) vulnerability in the URL submission form in YourFreeWorld.com Short Url & Url Tracker Script allows remote attack
СредняяCVSS 6,8Эксплойта нетEPSS 1 %yourfreeworld · short url and url tracker script22 мая 2006 г.