CVE-2009-4600

NetArt Media Real Estate Portal 2.0 is affected. The vulnerability resides in realestate20/loginaction.php where the Email parameter (username field) is used in SQL without proper sanitization, allowing remote attackers to execute arbitrary SQL commands. This is a classic SQL injection with poten...

Sql injection

SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2009-4478

Multiple cross-site scripting XSS vulnerabilities in Xstate Real Estate 1.0 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 home.html or 2 lands.html...

CVE-2009-4477

SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2009-4478

Multiple cross-site scripting XSS vulnerabilities in Xstate Real Estate 1.0 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 home.html or 2 lands.html...

CVE-2009-4478

CVE-2009-4478 affects Xstate Real Estate 1.0 with multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via PATH_INFO to (1) home.html or (2) lands.html. The vulnerability stems from improper PATH_INFO handling. Impact is web-based XSS; no specific exploi...

CVE-2009-4477

SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2009-4477

The CVE-2009-4477 entry corresponds to a SQL injection in page.html of Xstate Real Estate 1.0, exploitable via the pid parameter. The vulnerability is network-accessible, with low attack complexity and no authentication required, leading to partial confidentiality, integrity, and availability imp...

CVE-2009-4318

Cross-site scripting XSS vulnerability in index.php in Real Estate Manager 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-4318

CVE-2009-4318 describes a cross-site scripting (XSS) vulnerability in Real Estate Manager 1.0.1, where the parameter lang in index.php can be exploited to inject arbitrary script/HTML. The primary sources (NVD) confirm the issue and source text notes that some details come from third parties; no ...

CVE-2009-4318

Cross-site scripting XSS vulnerability in index.php in Real Estate Manager 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter. NOTE: some of these details are obtained from third party information...

Real Estate Manager 1.0.1 XSS

Title: Real Estate Manager 1.0.1 - XSS /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Real Estate Manager 1.0.1 - XSS // Author Info x Author: bi0 x Contact: [email protected] x Homepage...

Real Estate Manager 1.0.1 - XSS

No description provided by source. Title: Real Estate Manager 1.0.1 - XSS /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Real Estate Manager 1.0.1 - XSS // Author Info x Author: bi0 x...

Real Estate Portal X.0 SQL Injection

view source print? Real Estate Portal X.0 Auth Bypass Remote Sql Injection Author : AnTi SeCuRe Email : [email protected] TeaM : SauDi ViRuS TeaM Site : WwW.VxX9.Cc Note :Its Not Free .. Its By : $199.00 IF You Want To Buy It : http://www.netartmedia.net/enPricing.html Demo :...

Real Estate Portal X.0 - Authentication Bypass

Real Estate Portal X.0 - Authentication Bypass Real Estate Portal X.0 Auth Bypass Remote Sql Injection Author : AnTi SeCuRe Email : [email protected] TeaM : SauDi ViRuS TeaM Site : WwW.VxX9.Cc Note :Its Not Free .. Its By : $199.00 IF You Want To Buy It :...

Real Estate Portal X.0 (Auth Bypass) Remote Sql Injection

Exploit for unknown platform in category web applications ========================================================= Real Estate Portal X.0 Auth Bypass Remote Sql Injection ========================================================= Note :Its Not Free .. Its By : $199.00 IF You Want To Buy It :...

Real Estate Portal X.0 - Authentication Bypass

Real Estate Portal X.0 Auth Bypass Remote Sql Injection Author : AnTi SeCuRe Email : [email protected] TeaM : SauDi ViRuS TeaM Site : WwW.VxX9.Cc Note :Its Not Free .. Its By : $199.00 IF You Want To Buy It : http://www.netartmedia.net/enPricing.html Demo : http://www.site.com/realestate20/...

Real Estate Portal X.0 (Auth Bypass) Remote Sql Injection

No description provided by source. Real Estate Portal X.0 Auth Bypass Remote Sql Injection Author : AnTi SeCuRe Email : [email protected] TeaM : SauDi ViRuS TeaM Site : WwW.VxX9.Cc Note :Its Not Free .. Its By : $199.00 IF You Want To Buy It : http://www.netartmedia.net/enPricing.html Demo ...

Sql injection

SQL injection vulnerability in viewlisting.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-3497

Vastal I-Tech Agent Zone (aka The Real Estate Script) is affected by CVE-2009-3497 due to an SQL injection in view_listing.php via the id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The affected component is the view_listing.php script; the root cause i...