2233 matches found
OS Solution OSProperty 2.8.0 SQL Injection
OS Solution OSProperty 2.8.0 was vulnerable to an unauthenticated SQL injection in the countryid parameter of the request made to retrieve a list of states for a given country. The version was not bumped when the vulnerability was fixed, but if you download after April 27th, you downloaded a fixe...
OS Solution OSProperty 2.8.0 - SQL Injection Vulnerability
Exploit for php platform in category web applications OS Solution OSProperty 2.8.0 was vulnerable to an unauthenticated SQL injection in the countryid parameter of the request made to retrieve a list of states for a given country. The version was not bumped when the vulnerability was fixed, but i...
华天动力储存XSS（11处打包，非self-xss）
简要描述： 缺个移动硬盘存片子 详细说明： 上次提交说是self-xss，为了证明不是self-xss，这次打一下管理cookie吧 demo演示，涉及大量政府，医院，房产，电视台等网站：http://www.oa8000.com/solution.htm 首先还是来到官网，看到demo演示地址：http://demo.oa8000.com 然后先用官方提供的普通用户登录 存在XSS的地方在：客户管理--我的客户--新建...
CVE-2014-7337
The Acorn Estate Agents aka com.acorn.ea application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The Acorn Estate Agents aka com.acorn.ea application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7337
The CVE-2014-7337 entry affects the Android app Acorn Estate Agents (com.acorn.ea) version 3.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. This yields a...
CVE-2014-7337
The Acorn Estate Agents aka com.acorn.ea application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
allure-real-estate-theme-for-placester <= 0.1.1 - XSS in ZeroClipboard.swf
The Allure Real Estate Theme for Placester WordPress theme was affected by a XSS in ZeroClipboard.swf security vulnerability...
WP Property <= 1.38.3.2 - Non-administrative User XMLI Remote Information Disclosure
The WP-Property – WordPress Powered Real Estate and Property Management WordPress plugin was affected by a Non-administrative User XMLI Remote Information Disclosure security vulnerability...
FireStorm Professional Real Estate - Multiple SQL Injection
The FireStorm Professional Real Estate Plugin WordPress plugin was affected by a Multiple SQL Injection security vulnerability...
FireStorm Professional Real Estate 2.06.01 - xml/marker_listings.php id Parameter SQL Injection
The FireStorm Professional Real Estate Plugin WordPress plugin was affected by a xml/markerlistings.php id Parameter SQL Injection security vulnerability...
WordPress Real Estate Theme - Cross Site Request Forgery (CSRF)
Real Estate theme is prone to a cross-site request forgery vulnerability. It allows an attacker to gain unauthorized access to the affected application by performing certain actions in the context of an authorized user's session. Solution Update the theme...
WordPress Allure Real Estate Theme <= 0.1.1 - XSS
This WordPress theme is prone to a cross-site scripting XSS vulnerability in "in ZeroClipboard.swf". It allows remote attackers to inject arbitrary script or HTML. Solution Update the theme...
Real Estate by Templatic - CSRF File Upload
Description The realestate WordPress theme was affected by a Templatic Theme CSRF File Upload security vulnerability. File Access: https://example.com/wp-content/themes/Realestate/images/tmp/yourshell.php...
Real Estate by Templatic - CSRF File Upload
Description The realestate WordPress theme was affected by a Templatic Theme CSRF File Upload security vulnerability. PoC File Access: https://example.com/wp-content/themes/Realestate/images/tmp/yourshell.php...
WordPress Estate Theme - Remote Code Execution
There is a bug in this theme, that allows any website visitor to run and see the output of any shortcode. This gives unauthenticated visitors the same power to execute code on the server as regular publishers have. Solution Update the theme...
Free Real Estate Contact Form 1.09 - Local File Inclusion
No description provided by source. Securitylab.ir Application Info: Name: Free Real Estate Contact Form Version: 1.09 Vendor: http://www.phpkobo.com/realestatecontact.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...
myre real estate mobile 2012 - Multiple Vulnerabilities
No description provided by source. Title: ====== MYRE Real Estate Mobile 2012|2 - Multiple Vulnerabilities Date: ===== 2012-05-01 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=516 VL-ID: ===== 516 Common Vulnerability Scoring System: ==================================...
Rae Media Real Estate Single Agent SQL Injection Vulnerability
No description provided by source. Source: http://www.securityfocus.com/bid/45211/discuss Real Estate Single is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...