Skip to content

CVE-2008-1919

SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows...

7.5 HighPublic exploit

CVE-2008-1919 is a high vulnerability (CVSS 7.5) in Yourfreeworld Apartment Search Script, published April 22, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.00%, the 80th percentile. No source names a fixed version.

SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter.

Exploit likelihood

2.00%Up 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter.

Record: CVE-2008-1919
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-89
Updated: 2026-11-02

CVE List No score

SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter.

Record: CVE-2008-1919
Updated: 2026-11-02

EUVDEUVD-2008-1919 No score

SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter.

Record: EUVD-2008-1919
Updated: 2026-11-03

GitHub AdvisoriesGHSA-48c6-58v7-72hf No score

SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows...

SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter.

Record: GHSA-48c6-58v7-72hf
Weakness: CWE-89
Updated: 2026-11-02

Affected products

yourfreeworld apartment search script

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Apartment Search Script - 'listtest.php' SQL Injection	2008-04-19

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References