137 matches found
CVE-2018-15187: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php...
PHP Scripts Mall Multilanguage Real Estate MLM Script Cross Site Scripting Vulnerability
PHP Scripts Mall Multilanguage Real Estate MLM Script is a set of real estate online sales website scripts by PHP Scripts Mall India. A cross-site scripting vulnerability exists in PHP Scripts Mall Multilanguage Real Estate MLM Script version 3.0. The vulnerability can be exploited by a remote...
CVE-2018-6796
PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field...
Online Ticket Booking Cross-Site Scripting Vulnerability
Advanced Real Estate Script is a ready-made real estate website script.Online Ticket Booking is one of the online booking systems. A cross-site scripting vulnerability exists in Online Ticket Booking in Advanced Real Estate Script. The vulnerability can be exploited to conduct cross-site scriptin...
Online Ticket Booking Cross-Site Scripting Vulnerability (CNVD-2018-01216)
Advanced Real Estate Script is a ready-made real estate website script.Online Ticket Booking is one of the online booking systems. A cross-site scripting vulnerability exists in Online Ticket Booking in Advanced Real Estate Script. The vulnerability can be exploited to conduct cross-site scriptin...
Online Ticket Booking Cross-Site Scripting Vulnerability (CNVD-2018-01215)
Advanced Real Estate Script is a ready-made real estate website script.Online Ticket Booking is one of the online booking systems. A cross-site scripting vulnerability exists in Online Ticket Booking in Advanced Real Estate Script. The vulnerability can be exploited to conduct cross-site scriptin...
Online Ticket Booking Cross-Site Request Forgery Vulnerability
Advanced Real Estate Script is a ready-made real estate website script.Online Ticket Booking is one of the online booking systems. A cross-site request forgery vulnerability exists in Online Ticket Booking in Advanced Real Estate Script. An attacker can exploit this vulnerability to conduct a...
Online Ticket Booking Cross-Site Scripting Vulnerability (CNVD-2018-01214)
Advanced Real Estate Script is a ready-made real estate website script.Online Ticket Booking is one of the online booking systems. A cross-site scripting vulnerability exists in Online Ticket Booking in Advanced Real Estate Script. The vulnerability can be exploited to conduct cross-site scriptin...
Online Ticket Booking Cross-Site Scripting Vulnerability (CNVD-2018-01211)
Advanced Real Estate Script is a ready-made real estate website script.Online Ticket Booking is one of the online booking systems. A cross-site scripting vulnerability exists in Online Ticket Booking in Advanced Real Estate Script. The vulnerability can be exploited to conduct cross-site scriptin...
PHP Scripts Mall Advanced Real Estate Script SQL Injection Vulnerability
PHP Scripts Mall Advanced Real Estate Script is a set of PHP and MySQL based real estate website scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Advanced Real Estate Script version 4.0.7. A remote attacker can inject SQL into the search-results.php fi...
CVE-2017-17603
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...
CVE-2017-17603
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...
Sql injection
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...
CVE-2017-17603
CVE-2017-17603 affects Advanced Real Estate Script 4.0.7 (PHP/MySQL). The vulnerability is an SQL Injection in search-results.php exploitable via parameters projectmain, proj_type, searchtext, sell_price, or maxprice. According to NVD, CVSSv2/3 indicate high to critical impact (Base Scores 7.5/9....
CVE-2017-17603
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...
CVE-2017-17603: Improper Neutralization of Special Elements used in an SQL Command
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, projtype, searchtext, sellprice, or maxprice parameter...
PT-2017-14899
Name of the Vulnerable Software and Affected Versions Advanced Real Estate Script version 4.0.7 Description The issue concerns a SQL Injection problem. It affects the search-results.php file through the Projectmain, proj type, searchtext, sell price, or maxprice parameters. Recommendations For...
Advanced Real Estate Script 4.0.7 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Advanced Real Estate Script 4.0.7 - SQL Injection Dork: N/A Date: 10.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/advanced-real-estate-script/ Demo:...
Advanced Real Estate Script 4.0.7 - SQL Injection
Exploit Title: Advanced Real Estate Script 4.0.7 - SQL Injection Dork: N/A Date: 10.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/advanced-real-estate-script/ Version: 4.0.7 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A...
Vastal I-Tech Agent Zone SQL Injection Vulnerability
Vastal I-Tech Agent Zone aka The Real Estate Script is a real estate website management system. A SQL injection vulnerability exists in Vastal I-Tech Agent Zone aka The Real Estate Script. A remote attacker can exploit this vulnerability to inject SQL commands...