Real Estate 7 < 3.0.5 - Unauthenticated Reflected XSS

An Unauthenticated Reflected XSS vulnerability was discovered in the Real Estate 7 theme v3.0.4 for WordPress. Vulnerable parameters: ctsqftfrom, ctsqftto, ctlotsizefrom, ctlotsizeto, ctmls. Edit WPScanTeam: The issue has been hot-fixed in 3.0.4. So the fixed in has been set to 3.0.5 the next...

foxfirstrealestate.com.au Cross Site Scripting vulnerability OBB-1283046

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

real-estate-jerusalem.co.il Cross Site Scripting vulnerability OBB-1273950

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

buysellorrentwithalberto.realtor Cross Site Scripting vulnerability OBB-1265279

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

EJUCMS of Hainan EJU Technology Co., Ltd. suffers from xss vulnerability (CNVD-2020-51478)

Eju Real Estate System EjuCMS is a localized O2O real estate website platform system, where users can quickly find their suitable listings, and real estate agents promote their exclusive properties for sale, and so on. Hainan Eju Technology Co., Ltd EJUCMS exists xss vulnerability, attackers can...

franceestateservices.com Cross Site Scripting vulnerability OBB-1253180

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Ejucms front-end storage-type cross-site scripting vulnerability

Ejucms Real Estate System Ejucms is a localized O2O real estate website platform system. Hainan Ejucms Ejucms front-end storage-type cross-site scripting vulnerabilities. Attackers can use the vulnerability to obtain sensitive information such as administrator cookies...

Command Execution Vulnerability in EjuCMS of Hainan Eju Technology Co.

EjuCMS is a localized O2O real estate website platform system. EjuCMS has a command execution vulnerability that can be exploited by attackers to gain server privileges...

WordPress Theme Nexos Real Estate SQL Injection

SQL Injection vulnerability in Theme Nexos Real Estate searchorder parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Hainan EJU Technology Co., Ltd. ejucms v2.6.0 has arbitrary file deletion vulnerability

EJU real estate system ejucms is a set of localized O2O real estate website platform system. Ltd. eju real estate system ejucms v2.6.0 arbitrary file deletion vulnerability, an attacker can exploit the vulnerability on the integrity of the system...

Real Estate 7 < 3.0.4 - Unauthenticated Reflected XSS

An Unauthenticated Reflected XSS vulnerability was discovered in the Real Estate 7 theme v3.0.2 and v3.0.3 for WordPress. 3.0.3 - https://example.com/?ctkeyword=%22%3E%3Cimg%20src%20onerror%3Dalert%28%2FXSS%2F%29%3E 3.0.4 -...

Real Estate 7 < 3.0.4 - Unauthenticated Reflected XSS

An Unauthenticated Reflected XSS vulnerability was discovered in the Real Estate 7 theme v3.0.2 and v3.0.3 for WordPress. PoC 3.0.3 - https://example.com/?ctkeyword=%22%3E%3Cimg%20src%20onerror%3Dalert%28%2FXSS%2F%29%3E 3.0.4 -...

WordPress Real Estate 7 premium theme <= 3.0.3 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Real Estate 7 premium theme versions = 3.0.3. Solution Update the WordPress Real Estate 7 premium theme to the latest available version at least 3.0.4...

istria.estate Cross Site Scripting vulnerability OBB-1235211

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

atlas.estate Cross Site Scripting vulnerability OBB-1235207

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

WordPress NexosReal Estate 1.7 Theme - (search_order) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Theme NexosReal Estate 1.7 - 'searchorder' SQL Injection Google Dork: inurl:/wp-content/themes/nexos/ Exploit Author: Vlad Vector Vendor: Sanljiljan https://themeforest.net/user/sanljiljan Software Version: 1.7 Softwar...

WordPress NexosReal Estate Theme 1.7 Cross Site Scripting / SQL Injection

Exploit Title: WordPress Theme NexosReal Estate 1.7 - 'searchorder' SQL Injection Google Dork: inurl:/wp-content/themes/nexos/ Date: 2020-06-17 Exploit Author: Vlad Vector Vendor: Sanljiljan https://themeforest.net/user/sanljiljan Software Version: 1.7 Software Link:...

WordPress Theme NexosReal Estate 1.7 - 'search_order' SQL Injection

Exploit Title: WordPress Theme NexosReal Estate 1.7 - 'searchorder' SQL Injection Google Dork: inurl:/wp-content/themes/nexos/ Date: 2020-06-17 Exploit Author: Vlad Vector Vendor: Sanljiljan https://themeforest.net/user/sanljiljan Software Version: 1.7 Software Link:...

Code execution vulnerability in ejucms backend

EJU real estate system ejucms is a set of localized O2O real estate website platform system. ejucms backend code execution vulnerabilities, attackers can exploit the vulnerability to obtain server privileges...

SQL injection vulnerability in ejucms backend (CNVD-2020-49051)

EJU real estate system ejucms is a set of localized O2O real estate website platform system. ejucms background SQL injection vulnerability, attackers can exploit the vulnerability to obtain database sensitive information...