Turnkeyforms

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-4858 1Turnkeyforms 1Yahoo Answers Clone Apr 29, 2026 May 11, 2010 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in questiondetail.php in Yahoo Answers Clone allows remote attackers to inject arbitrary web script or HTML via the questionid parameter.
CVE-2008-6963 1Turnkeyforms 1Text Link Sales Apr 23, 2026 Aug 13, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative privileges via a direct request.
CVE-2008-6941 1Turnkeyforms 1Web Hosting Directory Apr 23, 2026 Aug 12, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field.
CVE-2008-6940 1Turnkeyforms 1Web Hosting Directory Apr 23, 2026 Aug 12, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a database backup via a direct request to admin/backup/db.
CVE-2008-6939 1Turnkeyforms 1Web Hosting Directory Apr 23, 2026 Aug 12, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or (2) gain privileges as another user by setting the logged cooki...Show more TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or (2) gain privileges as another user by setting the logged cookie to the target username.Show less
CVE-2008-6723 1Turnkeyforms 1Entertainment Portal Apr 23, 2026 Apr 14, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 TurnkeyForms Entertainment Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLogged cookie to Administrator.
CVE-2008-6351 1Turnkeyforms 1Local Classifieds Apr 23, 2026 Mar 2, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to inject arbitrary web script or HTML via the r parameter.
CVE-2008-6350 1Turnkeyforms 1Local Classifieds Apr 23, 2026 Mar 2, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in listtest.php in TurnkeyForms Local Classifieds allows remote attackers to execute arbitrary SQL commands via the r parameter.
CVE-2008-6349 1Turnkeyforms 1Business Survey Pro Apr 23, 2026 Mar 2, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in survey_results_text.php in TurnkeyForms Business Survey Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-6302 1Turnkeyforms 1Local Classifieds Apr 23, 2026 Feb 26, 2009 N/A· v4 N/A· v3 7.5 HIGH· v2 TurnkeyForms Local Classifieds allows remote attackers to bypass authentication and gain administrative access via a direct request to Site_Admin/admin.php.
CVE-2008-5487 1Turnkeyforms 1Text Link Sales Apr 23, 2026 Dec 12, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVE-2008-5486 1Turnkeyforms 1Text Link Sales Apr 23, 2026 Dec 12, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in admin.php in TurnkeyForms Text Link Sales allows remote attackers to execute arbitrary SQL commands via the id parameter.