Turnkeyforms Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/turnkeyforms/ Sun, 26 Feb 2023 09:11:47 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Turnkeyforms Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/turnkeyforms/ 32 32 CVE-2008-6939 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6939/ Sun, 26 Feb 2023 09:11:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6939/ TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or (2) gain privileges as another user by setting the logged cookie to the target username.

The post CVE-2008-6939 appeared first on CVE Vulnerability.

]]> TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or (2) gain privileges as another user by setting the logged cookie to the target username.

The post CVE-2008-6939 appeared first on CVE Vulnerability.

]]> CVE-2008-6940 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6940/ Sun, 26 Feb 2023 09:11:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6940/ TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a database backup via a direct request to admin/backup/db.

The post CVE-2008-6940 appeared first on CVE Vulnerability.

]]> TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a database backup via a direct request to admin/backup/db.

The post CVE-2008-6940 appeared first on CVE Vulnerability.

]]> CVE-2008-6941 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6941/ Sun, 26 Feb 2023 09:11:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6941/ SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field.

The post CVE-2008-6941 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field.

The post CVE-2008-6941 appeared first on CVE Vulnerability.

]]> CVE-2008-6963 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6963/ Sun, 26 Feb 2023 09:11:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6963/ admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative privileges via a direct request.

The post CVE-2008-6963 appeared first on CVE Vulnerability.

]]> admin.php in TurnkeyForms Text Link Sales allows remote attackers to bypass authentication and gain administrative privileges via a direct request.

The post CVE-2008-6963 appeared first on CVE Vulnerability.

]]> CVE-2008-6723 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6723/ Sun, 26 Feb 2023 09:11:40 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6723/ TurnkeyForms Entertainment Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLogged cookie to Administrator.

The post CVE-2008-6723 appeared first on CVE Vulnerability.

]]> TurnkeyForms Entertainment Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLogged cookie to Administrator.

The post CVE-2008-6723 appeared first on CVE Vulnerability.

]]>