2614 matches found
CVE-2008-2443
SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter...
CVE-2008-2443
SQL injection vulnerability in The Real Estate Script’s dpage.php (docID parameter) allows remote attackers to execute arbitrary SQL commands. This is a vulnerability in the Real Estate Script where the docID input is not properly sanitized, enabling potentially partial/complete database impact. ...
CVE-2008-2443: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in dpage.php in The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the docID parameter...
The Real Estate Script (dpage.php docID) SQL Injection Vulnerability
No description provided by source. Remote SQL Injection Vulnerability Therealestatescript dpage.php $ Author : HaCkeREgY $ c0nTaCT : [email protected] $ DownlOad : www.therealestatescript.com $ Price : The Real Estate Script is on sale for $99.95 $59.95 until June 1st...
The Real Estate Script (dpage.php docID) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== The Real Estate Script dpage.php docID SQL Injection Vulnerability ==================================================================== Remote SQL Injection Vulnerability...
The Real Estate Script - docID SQL Injection
The Real Estate Script - docID SQL Injection Remote SQL Injection Vulnerability Therealestatescript dpage.php $ Author : HaCkeREgY $ c0nTaCT : [email protected] $ DownlOad : www.therealestatescript.com $ Price : The Real Estate Script is on sale for $99.95 $59.95 until June 1st...
The Real Estate Script - 'docID' SQL Injection
Remote SQL Injection Vulnerability Therealestatescript dpage.php $ Author : HaCkeREgY $ c0nTaCT : [email protected] $ DownlOad : www.therealestatescript.com $ Price : The Real Estate Script is on sale for $99.95 $59.95 until June 1st. ==================================================== $ Dor...
cevado-sql.txt
I'm back, and I got more. SQL injection within some real estate CMS software. The vulnerability is present because of a failure to strip characters from the variables pageid and siteid resulting in exploitation by some simple blind SQLI. heres an example:...
cevado technologies real estate CMS SQL injection
I'm back, and I got more. SQL injection within some real estate CMS software. The vulnerability is present because of a failure to strip characters from the variables pageid and siteid resulting in exploitation by some simple blind SQLI. heres an example:...
Unfixed XSS vulnerability at www.estate-zone.com
Security researcher CCC, has submitted on 17/02/2008 a cross-site-scripting XSS vulnerability affecting www.estate-zone.com, which at the time of submission ranked 3625490 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...
joomlaomni-sql.txt
AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ dork 2= allinurl: "comomnirealestate" index.php?option=comomnirealestate&Itemid=0&func=showObject&info=contact&objid=-9999//union//select//username,password//from//mosusers/&results=S@BUN...
pds-sql.txt
Provided By Development Solutions SQL Injection Exploitpanel Real Estate SQL Injection Exploitpanel AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : "Provided By Development Solutions" dork 2 : allinurl: "agentlist.asp?Letter" EXPLOIT : Username: anything' OR 'x'='x Password: anything'...
Site2Nite Real Estate Web - agentlist.asp Multiple SQL Injections
Site2Nite Real Estate Web - agentlist.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/27779/info Site2Nite Real Estate Web is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...
Provided By Development Solutions SQL Injection Exploit(panel)
Provided By Development Solutions SQL Injection Exploitpanel Real Estate SQL Injection Exploitpanel AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : "Provided By Development Solutions" dork 2 : allinurl: "agentlist.asp?Letter" EXPLOIT : Username: anything' OR 'x'='x Password: anything'...
Site2Nite Real Estate Web - 'agentlist.asp' Multiple SQL Injections
source: https://www.securityfocus.com/bid/27779/info Site2Nite Real Estate Web is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...
[Aria-Security.Net] Real Estate Web SQL Injection
Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: Vendor: http://www.site2nite.com/ Google Search: Website Development Provided By: Site2Nite Username: anything' OR 'x'='x Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To Aria-Security.Net...
PHP Real Estate Classifieds "id" SQL Injection
t0pP8uZz & xprog have reported a vulnerability in PHP Real Estate Classifieds, which can be exploited by malicious people to conduct SQL injection attacks. Input passed to the "id" parameter in fullnews.php is not properly sanitised before being used in SQL queries. This can be exploited to...
CVE-2007-6463
Multiple cross-site scripting XSS vulnerabilities in the admin panel in PHP Real Estate Classifieds allow remote attackers to inject arbitrary web script or HTML via unspecified "text areas/boxes."...
