2614 matches found
CVE-2006-6807
CVE-2006-6807 is a SQL injection vulnerability in Softwebs Nepal’s Ananda Real Estate 3.4 and earlier. The flaw affects list.asp and allows remote attackers to execute arbitrary SQL commands via the agent parameter. The NVD entry lists a base score of 7.5 (HIGH) with network access, low attack co...
CVE-2006-6807
SQL injection vulnerability in list.asp in Softwebs Nepal aka Ananda Raj Pandey Ananda Real Estate 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the agent parameter...
CVE-2006-6807: Undefined Security Weakness
SQL injection vulnerability in list.asp in Softwebs Nepal aka Ananda Raj Pandey Ananda Real Estate 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the agent parameter...
Ananda Real Estate <= 3.4 (agent) Remote SQL Injection Vulnerability
Title : Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//list.asp?agent=SQL Example:...
Ananda Real Estate <= 3.4 (agent) Remote SQL Injection Vulnerability
No description provided by source. Title : Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//list.asp?agent=SQL Example:...
Ananda Real Estate <= 3.4 (agent) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability ==================================================================== Title : Ananda Real Estate = 3.4...
Ananda Real Estate 3.4 - agent SQL Injection
Ananda Real Estate 3.4 - agent SQL Injection Title : Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//list.asp?agent=SQL...
Ananda Real Estate 3.4 - 'agent' SQL Injection
Title : Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//list.asp?agent=SQL Example:...
PT-2006-6712 · 20/20 · 20/20 Datashed
Name of the Vulnerable Software and Affected Versions: 20/20 DataShed aka Real Estate Listing System affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the itemID parameter to "f-email.asp", or the peopleID an...
2020realest.txt
vendor site:http://www.2020applications.com/ product:20/20 real estate bug:injection sql risk:high injection sql get : /listings.asp?itemID='sql /listings.asp?peopleID='sql /f-googleearth.asp?itemID='sql /f-email.asp?strPeopleID=1&itemID='sql...
20/20 real estate [ multiples injection sql ]
vendor site:http://www.2020applications.com/ product:20/20 real estate bug:injection sql risk:high injection sql get : /listings.asp?itemID='sql /listings.asp?peopleID='sql /f-googleearth.asp?itemID='sql /f-email.asp?strPeopleID=1&itemID='sql...
CVE-2006-5955
Affected software: 20/20 DataShed (Real Estate Listing System). Vulnerable component: listings.asp (CVE-2006-5955) with vulnerability exposed via the itemID parameter, enabling SQL commands to be executed remotely. Related entry CVE-2006-6067 documents additional vectors (itemID to f-email.asp an...
2020 Real Estate 3.2 - Multiple SQL Injections
2020 Real Estate 3.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/21153/info 20/20 Real Estate is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allo...
CVE-2006-5934
SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the UserName field...
realSQL.txt
Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/Real Estate Listing System.txt ----------------------------------------------------------- Software: Real Estate Listing System Method : Sql Injection PoC: http://target/path/listings.asp?itemID=SQL Contact:...
CVE-2006-5934: Undefined Security Weakness
SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the UserName field...
CVE-2006-5934
SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the UserName field...
CVE-2006-5934
SQL injection vulnerability in Estate Agent Manager 1.3 and earlier affects admin/default.asp. The flaw allows remote attackers to execute arbitrary SQL commands via the UserName field, enabling potential data disclosure or modification. This is supported by the CVE/NVD entry (CVE-2006-5934) and ...
Estate Agent Manager <= v1.3 (default.asp) Login Bypass Vulnerability
No description provided by source. Title : Estate Agent Manager = v1.3 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0 from admin """"""""""""""""""""" ajann,Turkey ... Im not Hacker!...
2020 Real Estate 3.2 - listings.asp SQL Injection
2020 Real Estate 3.2 - listings.asp SQL Injection source: https://www.securityfocus.com/bid/21036/info 20/20 Real Estate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...