Sql injection

In PHP Scripts Mall advanced-real-estate-script 4.0.9, the newsedit.php newsid parameter is vulnerable to SQL Injection...

CVE-2019-20336

CVE-2019-20336 affects PHP Scripts Mall advanced-real-estate-script 4.0.9. The vulnerability is a cross-site scripting (XSS) flaw in the search-results.php searchtext parameter, caused by inadequate validation of client-side data in the WEB application. Exploitation allows an attacker to execute ...

CVE-2019-20337

Summary: CVE-2019-20337 affects PHP Scripts Mall advanced-real-estate-script 4.0.9. The vulnerability is in news_edit.php, where the news_id parameter is vulnerable to SQL Injection. The root cause is improper input validation/sanitization of externally provided SQL statements. Reported impact in...

Ltd. eju real estate system ejucms there are logic flaws vulnerabilities

Eju real estate system EjuCMS is a set of localized O2O real estate website platform system, users can quickly find their own suitable real estate, real estate agents to promote their own exclusive sale of properties and so on. Hainan Eju Technology Co., Ltd. eju real estate system ejucms there a...

Arbitrary File Read Vulnerability in EJUCMS

EJUCMS is a localized O2O real estate website platform system. EJUCMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

EJU real estate system ejucms 1.3 has an arbitrary file download vulnerability

EJU real estate system ejucms is a set of localized O2O real estate website platform system. EJU Real Estate System ejucms 1.3 has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in ejucms Xi***.php File

EJU real estate system ejucms is a set of localized O2O real estate website platform system. A SQL injection vulnerability exists in the ejucms Xi.php file, which can be exploited by attackers to obtain sensitive information...

oasis-estate.jp Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3712 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting oasis-estate.jp website and its users. Following...

Remote Code Execution Vulnerability in ejucms

EJU real estate system ejucms is a set of localized O2O real estate website platform system. A remote code execution vulnerability exists in ejucms, which can be exploited by attackers to execute malicious code...

SmartHouse Webapp 6.5.33 - Cross-Site Request Forgery

SmartHouse Webapp 6.5.33 - Cross-Site Request Forgery Exploit Title: SmartHouse Webapp 6.5.33 - Cross-Site Request Forgery Discovery by: LiquidWorm Date: 2019-12-02 Vendor Homepage: Tested Version: 6.5.33.17072501 CVE: N/A Advisory ID: ZSL-2019-5543 Advisory URL:...

Command Execution Vulnerability in ejucms

EJU real estate system ejucms is a set of localized O2O real estate website platform system. A command execution vulnerability exists in ejucms, which can be exploited by an attacker to execute arbitrary commands...

SQL Injection Vulnerability in Billing Master ss***.html Page

Billing Master is a real estate agent ERP management system. A SQL injection vulnerability exists in the Billing Master ss.html page, which can be exploited by attackers to obtain sensitive information...

E-House cms has SQL injection vulnerability

E-House cms is a real estate website building system. E-House cms has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in E-House cms Si*** Page

E-House cms is a real estate website building system. A SQL injection vulnerability exists in the E-House cms Si page, which can be exploited by attackers to obtain sensitive information...

Billing Master suffers from SQL injection vulnerability

Billing Master is the first provider of real estate management system and housing management system source code, the system has a full-featured listings of customer management. There is a SQL injection vulnerability in Billing Master, which can be exploited by attackers to obtain sensitive...

File upload vulnerability in Billing Master Ke***.cl***.php page

Billing Master is the first provider of real estate management system and housing management system source code, the system has a full-featured listings of customer management. Ke.cl.php page has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

WordPress Theme Zoner Real Estate - 4.1.1 Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Theme Zoner Real Estate - 4.1.1 Persistent Cross-Site Scripting Google Dork: inurl:/wp-content/themes/zoner/ Exploit Author: m0ze Vendor Homepage: https://fruitfulcode.com/ Software Link:...

WordPress Theme Zoner Real Estate - 4.1.1 Persistent Cross-Site Scripting

Exploit Title: WordPress Theme Zoner Real Estate - 4.1.1 Persistent Cross-Site Scripting Google Dork: inurl:/wp-content/themes/zoner/ Date: 2019-09-24 Exploit Author: m0ze Vendor Homepage: https://fruitfulcode.com/ Software Link:...

WordPress Zoner Real Estate Theme 4.1.1 Cross Site Scripting

Exploit Title: WordPress Theme Zoner Real Estate - 4.1.1 Persistent Cross-Site Scripting Google Dork: inurl:/wp-content/themes/zoner/ Date: 2019-09-24 Exploit Author: m0ze Vendor Homepage: https://fruitfulcode.com/ Software Link:...

WordPress Theme Zoner Real Estate - 4.1.1 Persistent Cross-Site Scripting

WordPress Theme Zoner Real Estate - 4.1.1 Persistent Cross-Site Scripting Exploit Title: WordPress Theme Zoner Real Estate - 4.1.1 Persistent Cross-Site Scripting Google Dork: inurl:/wp-content/themes/zoner/ Date: 2019-09-24 Exploit Author: m0ze Vendor Homepage: https://fruitfulcode.com/ Software...