2233 matches found
MOTIONBORG Web Real Estate <= 2.1 - SQL Injection Vulnerability
No description provided by source. Title : MOTIONBORG Web Real Estate = v2.1 Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.motionborg.com $$ : Unlimited Agents- $1,475.00 ajann SQL Injector Beta= Script Tables & Columns -dtproperties- id objectid property value...
Open Real Estate CMS 1.5.1 - Multiple Vulnerabilities
No description provided by source. Exploit Title: Open Real Estate CMS - Multiple vilnerabilities Date: 2013 9 August Exploit Author: Yashar shahinzadeh Special thanks to Mormoroth Credit goes for: http://y-shahinzadeh.ir & ha.cker.ir Vendor Homepage: http://monoray.net/products/6-open-real-estat...
Ananda Real Estate <= 3.4 (agent) Remote SQL Injection Vulnerability
No description provided by source. Title : Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//list.asp?agent=SQL Example:...
20/20 Real Estate 3.2 Listings.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21036/info 20/20 Real Estate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Virtual Real Estate Manager 3.5 - SQLi Vulnerability
No description provided by source...
Site2Nite Real Estate Web 'agentlist.asp' Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27779/info Site2Nite Real Estate Web is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
Joomla Joomanager SQL Injection Vulnerability
No description provided by source. Note from the vendor received 10Mar11: The old code was using JReguest::GetVar and we change it to JReguest::GetInt so the catid must be an integer only and not text. We updated this over 6 months ago in version 1.1.1 1 1 0 I'm Sid3^effects member from Inj3ct0r...
EMO Realty Manager SQLi Vulnerable
No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:EMO Realty Manager SQLi Vulnerable Published: 2010-06-08 Vendor url:http://emophp.com Price:249$ Platform: Unix, Linux , Windows Greetz to:Sid3^effects, aaNumb, M4n0j and to all ICW members...
Realtor Real Estate Agent (idproperty) SQL Injection Vulnerability
No description provided by source...
joomla component The Estate Agent (com_estateagent) SQL injection Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '72776' ssvid version = '1.0' author = 'kikay' vulDate = '2011-11-29' createDate ...
Joomla Component Property Local File Inclusion
No description provided by source. --------------------------------------------------------------------------------- Joomla Component Property Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group : LatinHackTeam Email &...
Wordpress WP-Property Plugin 1.35.0 - Arbitrary File Upload
No description provided by source. Description : Wordpress Plugins - WP-Property - WordPress Powered Real Estate and Property Management Shell Upload Vulnerability Version : 1.35.0 Link : http://wordpress.org/extend/plugins/wp-property/ Plugins :...
myre real estate mobile 2012/2 - Multiple Vulnerabilities
No description provided by source...
Threat Outbreak Alert: Fake Property Eviction Email Messages on March 1, 2014.
Medium Alert ID: 33147 First Published: 2014 March 3 15:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a property eviction notice for the recipient. The text in the email message attempts to convince the recipient to...
Trojan.Ferret DDoS Botnet Discovered
Researchers at Arbor Networks have identified a new DDoS bot with a fancy for ferrets. Following a clue in a tweet, researcher Dennis Schwarz found Trojan.Ferret, including a command and control panel with some insight into targets. To date, a relatively small number of malware samples and comman...
CVE-2013-5930
Cross-site scripting XSS vulnerability in searchresidential.php in Real Estate PHP Script allows remote attackers to inject arbitrary web script or HTML via the bos parameter...
CVE-2013-5931
SQL injection vulnerability in propertylistingsdetail.php in Real Estate PHP Script allows remote attackers to execute arbitrary SQL commands via the listingid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in searchresidential.php in Real Estate PHP Script allows remote attackers to inject arbitrary web script or HTML via the bos parameter...
CVE-2013-5930
CVE-2013-5930 affects the Real Estate PHP Script, specifically the search_residential.php endpoint. It is a cross-site scripting (XSS) vulnerability exploitable via the bos parameter, allowing remote attackers to inject arbitrary scripts/HTML. The NVD entry notes a CVSS v2 base score of 4.3 (Medi...
