Show filters
18 Total Results
Displaying 11-18 of 18
Sort by:
Attacker Value
Unknown
CVE-2010-1060
Disclosure Date: March 23, 2010 (last updated October 04, 2023)
Directory traversal vulnerability in staff/app/common.inc.php in Phpkobo Short URL 1.01, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the LANG_CODE parameter.
0
Attacker Value
Unknown
CVE-2009-4727
Disclosure Date: March 18, 2010 (last updated October 04, 2023)
SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via the username parameter.
0
Attacker Value
Unknown
CVE-2009-2642
Disclosure Date: July 28, 2009 (last updated October 04, 2023)
index.php in Desi Short URL Script 1.0 allows remote attackers to bypass authentication by setting the logged cookie to 1 and the uid cookie to an integer value, as demonstrated by a value of 13.
0
Attacker Value
Unknown
CVE-2008-3751
Disclosure Date: August 21, 2008 (last updated October 04, 2023)
SQL injection vulnerability in tr.php in YourFreeWorld Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
Attacker Value
Unknown
CVE-2008-2480
Disclosure Date: May 28, 2008 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in plus.php in plusPHP Short URL Multi-User Script 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the _pages_dir parameter.
0
Attacker Value
Unknown
CVE-2006-6460
Disclosure Date: December 11, 2006 (last updated October 04, 2023)
Yourfreeworld.com Short Url & Url Tracker Script allows remote attackers to obtain sensitive information via an invalid id parameter to login.php, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2509.
0
Attacker Value
Unknown
CVE-2006-2510
Disclosure Date: May 22, 2006 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the URL submission form in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs.
0
Attacker Value
Unknown
CVE-2006-2509
Disclosure Date: May 22, 2006 (last updated October 04, 2023)
SQL injection vulnerability in login.php in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
0
