Lucene search
K

PHP Real Estate Script 1.0 SQL Injection

🗓️ 12 Jun 2010 00:00:00Reported by L0rd CrusAd3rType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 31 Views

PHP Real Estate Script 1.0 SQL Injection Vulnerability in Eicra Real Estate Script

Code
`Author: L0rd CrusAd3r aka VSN [[email protected]]  
Exploit Title:PHP Real Estate Script SQLi Vulnerability  
Version:1.0  
Price:249$  
Vendor url:http://www.realestates.com.bd/  
Published: 2010-06-09  
Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue™®, S1ayer,d3c0d3r and to all ICW members  
###############################################################################################################################################################################################  
  
PHP Real Estate Script SQLi Vulnerability  
Author: L0rd CrusAd3r aka VSN [[email protected]]  
  
#####################################################################################################################################################################################################  
  
Description:  
  
Eicra Real Estate Script is a fully scalable turn-key PHP MySQL Real Estate.   
Charge members to list ads or run in free mode.   
It is a powerful combination of the most desired features and easy-to-use interface for property management tasks.   
This professional real estate system allows you to automate and simplify the realty business process.  
With this solution be able to transform your business into a more efficient, productive and prosperous e-business enterprise.  
EicraRealEstate is a fully scalable turnkey PHP MySQL real estate script allowing site administrators to charge members to list properties.   
#######################################################################################################################################################################################################  
  
Vulnerability:  
  
*SQLi Vulnerability  
  
DEMO URL :http://demo.realestates.com.bd/index.php?plugin_id=28&p_id=[sqli]  
  
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------  
# 0day n0 m0re #  
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------  
  
  
##########################################################################################################################################################################################  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation