CVE-2008-6796

SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter aka the Admin field or Username field...

CVE-2008-6796

CVE-2008-6796 is a SQL injection vulnerability affecting Pre Projects Pre Real Estate Listings, specifically in the login script (manager/login.php). The vulnerability allows remote attackers to inject arbitrary SQL via the username1 parameter (also referred to as Admin/Username field), enabling ...

CVE-2008-6293

admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the usernamecookie to "admin."...

CVE-2008-6042

SQL injection vulnerability in the research module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the ad parameter to index.php...

Sql injection

SQL injection vulnerability in the research module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the ad parameter to index.php...

CVE-2008-6042

SQL injection vulnerability in the research module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the ad parameter to index.php...

CVE-2008-6042

The CVE-2008-6042 entry concerns a SQL injection in the NetArtMedia Real Estate Portal 2.0, exploitable via the ad parameter to index.php, allowing remote SQL execution. The vulnerability is tied to the re_search module, enabling partial confidentiality and integrity impact with a base score of 7...

CVE-2008-6009

SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the Auth cookie to 1...

CVE-2008-6010

Multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0 allow remote attackers to read arbitrary files via a .. dot dot in the 1 mod, 2 page, or 3 lang parameter to index.php; or the 4 action or 5 folder parameter in a security request to admin/index.php...

CVE-2008-6011

SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

Directory traversal

Multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0 allow remote attackers to read arbitrary files via a .. dot dot in the 1 mod, 2 page, or 3 lang parameter to index.php; or the 4 action or 5 folder parameter in a security request to admin/index.php...

Sql injection

SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

Authentication flaw

SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the Auth cookie to 1...

CVE-2008-6010

CVE-2008-6010 describes multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0, allowing remote attackers to read arbitrary files via a .. in the index.php parameters (mod, page, lang) or in admin/index.php parameters (action, folder). Root cause: insufficient validation/saniti...

CVE-2008-6011

SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

CVE-2008-6009

SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the Auth cookie to 1...

CVE-2008-6010

Multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0 allow remote attackers to read arbitrary files via a .. dot dot in the 1 mod, 2 page, or 3 lang parameter to index.php; or the 4 action or 5 folder parameter in a security request to admin/index.php...

CVE-2008-6009

CVE-2008-6009 affects SG Real Estate Portal 2.0, where remote attackers can bypass authentication and gain administrative access by setting the Auth cookie to 1. The vulnerability enables partial confidentiality, integrity, and availability impacts as indicated in the CVSS score (AV:N/AC:L/Au:N/C...

CVE-2008-6011

The vulnerability CVE-2008-6011 affects SG Real Estate Portal 2.0, specifically the index.php page where the page_id parameter is used in SQL queries. The underlying root cause is an SQL injection that allows remote attackers to execute arbitrary SQL commands. The vulnerability is categorized wit...

AJ Classifieds - Real Estate Shell Upload

AJClassifieds Realestate RFu script down: http://www.ajclassifieds.net/demo/ajclassifiedsme/ClassifiedsRealestate/ ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 16.01.09 Home: z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK,...