2035 matches found
MOTIONBORG Web Real Estate 2.1 - SQL Injection
MOTIONBORG Web Real Estate 2.1 - SQL Injection Title : MOTIONBORG Web Real Estate $1,475.00 ajann SQL Injector Beta= Script Tables & Columns -dtproperties- id objectid property value uvalue lvalue version -Events- EventId EventDay EventStartDate EventEndDate EventName EventDesc EventIngUrl...
MOTIONBORG Web Real Estate 2.1 - SQL Injection
Title : MOTIONBORG Web Real Estate $1,475.00 ajann SQL Injector Beta= Script Tables & Columns -dtproperties- id objectid property value uvalue lvalue version -Events- EventId EventDay EventStartDate EventEndDate EventName EventDesc EventIngUrl EventStatus -MailingList- RecordID FullName Phone Ema...
Ananda Real Estate list.asp SQL远程注入漏洞
Ananda Real Estate是用于创建房地产站点的软件。 Ananda Real Estate在处理用户请求时存在输入验证漏洞，远程攻击者可能利用此漏洞非授权访问数据库，导致敏感信息泄露或数据库破坏。 Ananda Real Estate的list.asp脚本没有正确过滤agent参数的输入，允许攻击者通过在输入数据中插入特定的SQL语句恶意操作数据库。 Softwebs Nepal Ananda Real Estate 3.4 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
CVE-2006-6807
SQL injection vulnerability in list.asp in Softwebs Nepal aka Ananda Raj Pandey Ananda Real Estate 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the agent parameter...
CVE-2006-6807
CVE-2006-6807 is a SQL injection vulnerability in Softwebs Nepal’s Ananda Real Estate 3.4 and earlier. The flaw affects list.asp and allows remote attackers to execute arbitrary SQL commands via the agent parameter. The NVD entry lists a base score of 7.5 (HIGH) with network access, low attack co...
CVE-2006-6807
SQL injection vulnerability in list.asp in Softwebs Nepal aka Ananda Raj Pandey Ananda Real Estate 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the agent parameter...
Ananda Real Estate <= 3.4 (agent) Remote SQL Injection Vulnerability
Title : Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//list.asp?agent=SQL Example:...
Ananda Real Estate 3.4 - agent SQL Injection
Ananda Real Estate 3.4 - agent SQL Injection Title : Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//list.asp?agent=SQL...
Ananda Real Estate <= 3.4 (agent) Remote SQL Injection Vulnerability
No description provided by source. Title : Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//list.asp?agent=SQL Example:...
Ananda Real Estate <= 3.4 (agent) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability ==================================================================== Title : Ananda Real Estate = 3.4...
Ananda Real Estate 3.4 - 'agent' SQL Injection
Title : Ananda Real Estate = 3.4 agent Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://www.enthrallweb.us $$ : 179.40 USD SQL--------------------------------------------------------- http://target/path//list.asp?agent=SQL Example:...
PT-2006-6712 · 20/20 · 20/20 Datashed
Name of the Vulnerable Software and Affected Versions: 20/20 DataShed aka Real Estate Listing System affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the itemID parameter to "f-email.asp", or the peopleID an...
2020realest.txt
vendor site:http://www.2020applications.com/ product:20/20 real estate bug:injection sql risk:high injection sql get : /listings.asp?itemID='sql /listings.asp?peopleID='sql /f-googleearth.asp?itemID='sql /f-email.asp?strPeopleID=1&itemID='sql...
20/20 real estate [ multiples injection sql ]
vendor site:http://www.2020applications.com/ product:20/20 real estate bug:injection sql risk:high injection sql get : /listings.asp?itemID='sql /listings.asp?peopleID='sql /f-googleearth.asp?itemID='sql /f-email.asp?strPeopleID=1&itemID='sql...
2020 Real Estate 3.2 - Multiple SQL Injections
2020 Real Estate 3.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/21153/info 20/20 Real Estate is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allo...
CVE-2006-5955
Affected software: 20/20 DataShed (Real Estate Listing System). Vulnerable component: listings.asp (CVE-2006-5955) with vulnerability exposed via the itemID parameter, enabling SQL commands to be executed remotely. Related entry CVE-2006-6067 documents additional vectors (itemID to f-email.asp an...
realSQL.txt
Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/Real Estate Listing System.txt ----------------------------------------------------------- Software: Real Estate Listing System Method : Sql Injection PoC: http://target/path/listings.asp?itemID=SQL Contact:...
2020 Real Estate 3.2 - listings.asp SQL Injection
2020 Real Estate 3.2 - listings.asp SQL Injection source: https://www.securityfocus.com/bid/21036/info 20/20 Real Estate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
20/20 Real Estate 3.2 - 'listings.asp' SQL Injection
source: https://www.securityfocus.com/bid/21036/info 20/20 Real Estate is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...
landshop.txt
vendor site: http://www.landshop.gr/ product: LandShop Real Estate bug: multiple injection sql & xss risk : high xss get : http://site.com/PATH/action/ls.php?lang=en&action=list&start='"alertdocument.cookie http://site.com/PATH/action/ls.php?lang=en&action=list&start=0&CATID='"alertdocument.cooki...