High

DATE	CVE	VULNERABILITY TITLE	RISK
2009-08-12	CVE-2008-6941	SQL Injection vulnerability in Turnkeyforms web Hosting Directory SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field. network low complexity turnkeyforms CWE-89	7.5
2009-08-12	CVE-2008-6940	Permissions, Privileges, and Access Controls vulnerability in Turnkeyforms web Hosting Directory TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a database backup via a direct request to admin/backup/db. network low complexity turnkeyforms CWE-264	7.5
2009-08-12	CVE-2008-6939	Improper Authentication vulnerability in Turnkeyforms web Hosting Directory TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or (2) gain privileges as another user by setting the logged cookie to the target username. network low complexity turnkeyforms CWE-287	7.5