CVE-2007-0490

Open-Realty 2.3.4 is affected by CVE-2007-0490 where index.php via listingview with an invalid listingID exposes the full server path. This is an information-disclosure vulnerability that can be exploited remotely to obtain sensitive filesystem paths. Root cause is not detailed in the provided do...

CVE-2007-0490

index.php in Open-Realty 2.3.4 allows remote attackers to obtain sensitive information the full path via an invalid listingID parameter in a listingview action...

Full Path Disclosure in Open-Realty ( v2.3.4 )

Hello Vulnerable : Open-Realty Verision : 2.3.4 Web : http://www.open-realty.org Exploit : http://www.example.com/script/index.php?action=listingview&listingID='anything' -------------------- Discoverey By LinuxDrox www.LeZr.Com/vb Best Regards ,,,,...

CVE-2006-3148

SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitrary SQL commands via the sorttype parameter to index.php...

CVE-2006-3148

SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitrary SQL commands via the sorttype parameter to index.php...

CVE-2006-3148

The CVE-2006-3148 entry concerns an SQL injection in Open-Realty 2.3.1. The vulnerability affects the application via the sorttype parameter to index.php, with potential arbitrary SQL execution if exploitable. The root cause is a likely improper handling of user input in search.inc.php, as cited ...

CVE-2006-3148: Undefined Security Weakness

SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitrary SQL commands via the sorttype parameter to index.php...