Readymade Real Estate Script SQL Injection / Cross Site Scripting

x========================================================================================================================================x | Title : Readymade Real Estate Script Blind SQL & XSS Vulnerabilities | Software : Advanced Real Estate Script | Last Update : 12/07/24 | First Release:...

Readymade Real Estate Script SQL Injection / Cross Site Scripting Vulnerabilities

x========================================================================================================================================x | Title : Readymade Real Estate Script Blind SQL & XSS Vulnerabilities | Software : Advanced Real Estate Script | Vendor : http://www.i-netsolution.com/ | Dat...

GZ Scripts Property Listing Script Cross-site Script Vulnerability

GZ Scripts Property Listing Script is a real estate software from GZ Scripts, Inc. A cross-site scripting vulnerability exists in GZ Scripts Property Listing Script that stems from an unknown issue with /preview.php...

CVE-2017-20130

A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/searchproperty.php. The manipulation of the argument propertyfor leads to sql injection. The attack can be...

CVE-2017-20130

A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/searchproperty.php. The manipulation of the argument propertyfor leads to sql injection. The attack can be...

Sql injection

A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/searchproperty.php. The manipulation of the argument propertyfor leads to sql injection. The attack can be...

CVE-2017-20130 Itech Real Estate Script search_property.php sql injection

A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/searchproperty.php. The manipulation of the argument propertyfor leads to sql injection. The attack can be...

CVE-2017-20130 Itech Real Estate Script search_property.php sql injection

A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/searchproperty.php. The manipulation of the argument propertyfor leads to sql injection. The attack can be...

CVE-2017-20130

CVE-2017-20130 affects Itech Real Estate Script 3.12. The vulnerability is an SQL injection in an unknown function of the file /real-estate-script/search_property.php, triggered by manipulating the property_for argument. The flaw can be exploited remotely and has been publicly disclosed; multiple...

CVE-2017-20130: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/searchproperty.php. The manipulation of the argument propertyfor leads to sql injection. The attack can be...

PT-2022-7997

Name of the Vulnerable Software and Affected Versions Itech Real Estate Script version 3.12 Description A critical issue affects an unknown functionality of the file /real-estate-script/search property.php. The manipulation of the property for argument leads to SQL injection. The attack can be...

Ambit Technologies iTech Real Estate has a SQL injection vulnerability in its scripts.

Ambit Technologies iTech Real Estate Script is an intelligent PHP script by Ambit Technologies India. Properties for sale and rent can be listed using the edit option to edit property details. Ambit Technologies iTech Real Estate Script version 3.12 suffers from a SQL injection vulnerability that...

PHP Scripts Mall advanced-real-estate-script cross-site scripting vulnerability

PHP Scripts Mall advanced-real-estate-script is a real estate website system script by PHP Scripts Mall India. A cross-site scripting vulnerability exists in the 'searchtext' parameter of the search-results.php file in PHP Scripts Mall advanced-real-estate-script version 4.0.9. The vulnerability...

PHP Scripts Mall advanced-real-estate-script SQL Injection Vulnerability

PHP Scripts Mall advanced-real-estate-script is a real estate website system script by PHP Scripts Mall India. A SQL injection vulnerability exists in the 'newsid' parameter of the newsedit.php file in PHP Scripts Mall advanced-real-estate-script version 4.0.9. The vulnerability stems from a...

CVE-2019-20337

In PHP Scripts Mall advanced-real-estate-script 4.0.9, the newsedit.php newsid parameter is vulnerable to SQL Injection...

CVE-2019-20337

Summary: CVE-2019-20337 affects PHP Scripts Mall advanced-real-estate-script 4.0.9. The vulnerability is in news_edit.php, where the news_id parameter is vulnerable to SQL Injection. The root cause is improper input validation/sanitization of externally provided SQL statements. Reported impact in...

CVE-2019-20336: Improper Neutralization of Input During Web Page Generation

In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS...

CVE-2019-20337: Improper Neutralization of Special Elements used in an SQL Command

In PHP Scripts Mall advanced-real-estate-script 4.0.9, the newsedit.php newsid parameter is vulnerable to SQL Injection...

PT-2020-10390

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue concerns a SQL Injection vulnerability. Specifically, the news id parameter in the news edit.php script is vulnerable. Recommendations For version 4.0.9, avoid...

PT-2020-10389

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall advanced-real-estate-script version 4.0.9 Description The issue concerns a problem where the searchtext parameter in the "search-results.php" endpoint is vulnerable to XSS. This means an attacker could potentially inject...