CVE-2008-6010

CVE-2008-6010 describes multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0, allowing remote attackers to read arbitrary files via a .. in the index.php parameters (mod, page, lang) or in admin/index.php parameters (action, folder). Root cause: insufficient validation/saniti...

CVE-2008-6009

CVE-2008-6009 affects SG Real Estate Portal 2.0, where remote attackers can bypass authentication and gain administrative access by setting the Auth cookie to 1. The vulnerability enables partial confidentiality, integrity, and availability impacts as indicated in the CVSS score (AV:N/AC:L/Au:N/C...

CVE-2008-6010

Multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0 allow remote attackers to read arbitrary files via a .. dot dot in the 1 mod, 2 page, or 3 lang parameter to index.php; or the 4 action or 5 folder parameter in a security request to admin/index.php...

CVE-2008-6009

SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the Auth cookie to 1...

CVE-2008-6011

The vulnerability CVE-2008-6011 affects SG Real Estate Portal 2.0, specifically the index.php page where the page_id parameter is used in SQL queries. The underlying root cause is an SQL injection that allows remote attackers to execute arbitrary SQL commands. The vulnerability is categorized wit...

CVE-2008-6010: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in SG Real Estate Portal 2.0 allow remote attackers to read arbitrary files via a .. dot dot in the 1 mod, 2 page, or 3 lang parameter to index.php; or the 4 action or 5 folder parameter in a security request to admin/index.php...

CVE-2008-6011: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

CVE-2008-6009: Improper Authentication

SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the Auth cookie to 1...

Aj Classifieds - Real Estate v3 Remote Shell Upload Vulnerability

Exploit for unknown platform in category web applications ================================================================= Aj Classifieds - Real Estate v3 Remote Shell Upload Vulnerability ================================================================= AJClassifieds Realestate RFu script down:...

Aj Classifieds - Real Estate v3 Remote Shell Upload Vulnerability

No description provided by source. AJClassifieds Realestate RFu script down: http://www.ajclassifieds.net/demo/ajclassifiedsme/ClassifiedsRealestate/ ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 16.01.09 Home: z0rlu.blogspot.com /...

AJ Classifieds - Real Estate Shell Upload

AJClassifieds Realestate RFu script down: http://www.ajclassifieds.net/demo/ajclassifiedsme/ClassifiedsRealestate/ ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 16.01.09 Home: z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK,...

Aj Classifieds Real Estate 3.0 - Arbitrary File Upload

AJClassifieds Realestate RFu script down: http://www.ajclassifieds.net/demo/ajclassifiedsme/ClassifiedsRealestate/ ---------------------------------------------------------- Discovered By: ZoRLu msn: [email protected] Date: 16.01.09 Home: z0rlu.blogspot.com / www.experl.com N0T: YALNIZLIK,...

Mole Group Vacation Estate Listing Script SQL Injection

Vacation Estate Listing Blind Sql Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms Demo: http://vacation.mole-group.com/ Bug in \propertiesview.php Exploit: propertiesview.php?editid1=2 and substring@@version,1,1=4 propertiesview.php?editid1=2 and...

Mole Group Vacation Estate Listing Script (editid1) Blind SQL Injection

No description provided by source. Vacation Estate Listing Blind Sql Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms Demo: http://vacation.mole-group.com/ Bug in \propertiesview.php Exploit: propertiesview.php?editid1=2 and substring@@version,1,1=4...

Mole Group Vacation Estate Listing Script - Blind SQL Injection

Vacation Estate Listing Blind Sql Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms Demo: http://vacation.mole-group.com/ Bug in \propertiesview.php Exploit: propertiesview.php?editid1=2 and substring@@version,1,1=4 propertiesview.php?editid1=2 and...

Mole Group Vacation Estate Listing Script (editid1) Blind SQL Injection

Exploit for unknown platform in category web applications ======================================================================= Mole Group Vacation Estate Listing Script editid1 Blind SQL Injection ======================================================================= Vacation Estate Listing...

google-hack, the new form-vulnerability warning-the black bar safety net

Exploit Code : Powered by Com EndeavorsReal EstateEmlak.NET SQL injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/aut... BLOG : http://my.opera.com/SQL-In... MA? L : [email protected] DORK 1 : allinurl: "index. php? go=detail" DORK 2 : allinurl: "Powered by Com Endeavors" DOR...

CVE-2008-5309

SQL injection vulnerability in NetArt Media Real Estate Portal 1.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter in the resendemail module to index.php...

Sql injection

SQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers to execute arbitrary SQL commands via the loginlg parameter username. NOTE: some of these details are obtained from third party information...

CVE-2008-5306

SQL injection vulnerability in admin/index.php in PG Real Estate Solution allows remote attackers to execute arbitrary SQL commands via the loginlg parameter username. NOTE: some of these details are obtained from third party information...