Skip to content

Yourfreeworld · weakness class

SQL Injection

21 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.

  1. SQL injection vulnerability in index.php in YourFreeWorld Shopping Cart Script allows remote attackers to execute arbitrary SQL commands via the c parameter.CVE-2008-4886Yourfreeworld · 2.4% likely

    CWE-89

  2. SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter.CVE-2008-1919Yourfreeworld · 2.0% likely

    CWE-89

  3. SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-3757Yourfreeworld · 1.3% likely

    CWE-89

  4. SQL injection vulnerability in tr.php in YourFreeWorld Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-3751Yourfreeworld · 1.3% likely

    CWE-89

  5. SQL injection vulnerability in tr.php in YourFreeWorld Banner Management Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-3749Yourfreeworld · 1.2% likely

    CWE-89

  6. SQL injection vulnerability in details.php in YourFreeWorld Programs Rating Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-3753Yourfreeworld · 1.2% likely

    CWE-89

  7. SQL injection vulnerability in tr.php in YourFreeWorld Viral Marketing Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-3756Yourfreeworld · 1.1% likely

    CWE-89

  8. SQL injection vulnerability in view.php in YourFreeWorld Classifieds Script allows remote attackers to execute arbitrary SQL commands via the category parameter.CVE-2008-3755Yourfreeworld · 1.1% likely

    CWE-89

  9. SQL injection vulnerability in tr.php in YourFreeWorld Downline Builder allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-4895Yourfreeworld · 1.1% likely

    CWE-89

  10. SQL injection vulnerability in tr1.php in YourFreeWorld Scrolling Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-4885Yourfreeworld · 1.0% likely

    CWE-89

  11. SQL injection vulnerability in tr.php in YourFreeWorld Blog Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-4883Yourfreeworld · 1.0% likely

    CWE-89

  12. SQL injection vulnerability in trr.php in YourFreeWorld Ad Board Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-3725Yourfreeworld · 1.0% likely

    CWE-89

  13. SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these…CVE-2010-4981Yourfreeworld · 1.0% likely

    CWE-89

  14. SQL injection vulnerability in tr.php in YourFreeWorld URL Rotator Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-3750Yourfreeworld · 1.0% likely

    CWE-89

  15. SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-4900Yourfreeworld · 1.0% likely

    CWE-89

  16. SQL injection vulnerability in tr.php in YourFreeWorld Autoresponder Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-4882Yourfreeworld · 1.0% likely

    CWE-89

  17. SQL injection vulnerability in tr.php in YourFreeWorld Ad-Exchange Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-3752Yourfreeworld · 1.0% likely

    CWE-89

  18. SQL injection vulnerability in tr.php in YourFreeWorld Reminder Service Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-4881Yourfreeworld · 1.0% likely

    CWE-89

  19. SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Hosting Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-4884Yourfreeworld · 1.0% likely

    CWE-89

  20. SQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote attackers to execute arbitrary SQL commands via the catagorie parameter.CVE-2008-2065Yourfreeworld · 1.0% likely

    CWE-89

  21. SQL injection vulnerability in trl.php in YourFreeWorld Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter.CVE-2008-3754Yourfreeworld · 0.9% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.