CVE-2025-2126

CVE-2025-2126 affects JoomlaUX JUX Real Estate 3.4.0. The vulnerability arises from improper handling of the GET parameter title in the component’s path /extensions/realestate/index.php/properties/list/list-with-sidebar/realties, which leads to a SQL injection. Multiple sources (NVD, CVE listings...

CVE-2025-2126 JoomlaUX JUX Real Estate GET Parameter realties sql injection

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical. This issue affects some unknown processing of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties of the component GET Parameter Handler. The manipulation of the...

CVE-2025-2126 JoomlaUX JUX Real Estate GET Parameter realties sql injection

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical. This issue affects some unknown processing of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties of the component GET Parameter Handler. The manipulation of the...

PT-2025-10455 · Joomlaux · Joomlaux Jux Real Estate

Name of the Vulnerable Software and Affected Versions: JoomlaUX JUX Real Estate version 3.4.0 Description: A problematic issue was found in the software, affecting an unknown function of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties. The manipulation of the...

JoomlaUX JUX Real Estate 注入漏洞

JoomlaUX JUX Real Estate is a Joomla component from JoomlaUX designed to meet a variety of real estate related needs. An injection vulnerability exists in JoomlaUX JUX Real Estate version 3.4.0, which stems from the fact that incorrect manipulation of the parameter title can lead to SQL injection...

JoomlaUX JUX Real Estate 代码注入漏洞

JoomlaUX JUX Real Estate is a Joomla component from JoomlaUX designed to meet a variety of real estate related needs. A code injection vulnerability exists in JoomlaUX JUX Real Estate version 3.4.0, which stems from the fact that incorrect manipulation of the parameters Itemid and jpyearbuilt can...

Silk Typhoon targeting IT supply chain

Executive summary: Microsoft Threat Intelligence identified a shift in tactics by Silk Typhoon, a Chinese espionage group, now targeting common IT solutions like remote management tools and cloud applications to gain initial access. While they haven't been observed directly targeting Microsoft...

CVE-2025-1515 WP Real Estate Manager <= 2.8 - Authentication Bypass via Account Takeover

The WP Real Estate Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.8. This is due to insufficient identity verification on the LinkedIn login request process. This makes it possible for unauthenticated attackers to bypass official...

CVE-2025-1515 WP Real Estate Manager <= 2.8 - Authentication Bypass via Account Takeover

The WP Real Estate Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.8. This is due to insufficient identity verification on the LinkedIn login request process. This makes it possible for unauthenticated attackers to bypass official...

WordPress plugin WP Real Estate Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2025-9820

Name of the Vulnerable Software and Affected Versions WP Real Estate Manager plugin for WordPress versions prior to 2.9 Description The issue is related to insufficient identity verification on the LinkedIn login request process, allowing unauthenticated attackers to bypass official authenticatio...

WordPress WP Real Estate Manager plugin <= 2.8 - Authentication Bypass via Account Takeover vulnerability

Authentication Bypass via Account Takeover vulnerability discovered by Foxyyy in WordPress Plugin WP Real Estate Manager versions = 2.8...

The vulnerability of the search.php script in the Real Estate Property Management System allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the search.php script in the Real Estate Property Management System is related to the lack of measures taken to protect the web page structure when processing the PropertyName parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

CVE-2025-1576

A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajaxstate.php. The manipulation of the argument StateName as part of String leads to sql injection. The attack can ...

CVE-2025-1576

A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajaxstate.php. The manipulation of the argument StateName as part of String leads to sql injection. The attack can ...

CVE-2025-1576 code-projects Real Estate Property Management System ajax_state.php sql injection

A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajaxstate.php. The manipulation of the argument StateName as part of String leads to sql injection. The attack can ...

CVE-2025-1576

CVE-2025-1576 affects Code-Projects Real Estate Property Management System 1.0. The vulnerability is an SQL injection in an unknown function of the file /ajax_state.php, caused by manipulating the StateName argument in a string. It is exploitable remotely, and the exploit has been disclosed publi...

CVE-2025-1576 code-projects Real Estate Property Management System ajax_state.php sql injection

A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajaxstate.php. The manipulation of the argument StateName as part of String leads to sql injection. The attack can ...

Code-Projects Real Estate Property Management System 注入漏洞

Code-Projects Real Estate Property Management System is an open source real estate property management system from Code-Projects. An injection vulnerability exists in Code-Projects Real Estate Property Management System version 1.0. An attacker can exploit this vulnerability to perform SQL...

CVE-2025-22645

Improper Restriction of Excessive Authentication Attempts vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows Password Brute Forcing.This issue affects Real Estate Manager: from n/a through = 7.3...