WordPress Realtyna Organic IDX Plugin <= 4.14.4 - SQL Injection

The Realtyna Organic IDX plugin plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 4.14.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attacke...

EUVD-2006-6050

Malware in sbrugna...

WordPress Real-Estate-Listing-Realtyna-Wpl 4.3.2 Database Disclosure

Exploit Title : WordPress Real-Estate-Listing-Realtyna-Wpl Plugins 4.3.2 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : realtyna.com wordpress.org/plugins/real-estate-listing-realtyna-wpl/ Software Download...

houseviewonline.com XSS vulnerability

Open Bug Bounty ID: OBB-614816 Description| Value ---|--- Affected Website:| houseviewonline.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Rae Media INC Real Estate Single and Multi Agent System SQL Injection

Exploit for asp platform in category web applications ===================================================================== Rae Media INC Real Estate Single and Multi Agent System SQL Injection =====================================================================...

Virtual Real Estate Manager 3.5 - SQL Injection

====================================================== Virtual Real Estate Manager V 3.5 SQLi Vulnerability ====================================================== Name : Virtual Real Estate Manager V 3.5 SQLi Vulnerability Date : june, 9 2010 Vendor url...

FreeRealty(Free Real Estate Listing Software) Authentication bypass

Exploit for php platform in category web applications =================================================================== FreeRealtyFree Real Estate Listing Software Authentication bypass =================================================================== Exploit Title: Authentication bypass in...

FreeRealty(Free Real Estate Listing Software) - Authentication Bypass

FreeRealtyFree Real Estate Listing Software - Authentication Bypass Exploit Title: Authentication bypass in FreeRealtyFree Real Estate Listing Software Date: 27-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : Authentication bypass in FreeRealty Vendor:http://freerealty.rwcinc.net/...

FreeRealty(Free Real Estate Listing Software) - Authentication Bypass

Exploit Title: Authentication bypass in FreeRealtyFree Real Estate Listing Software Date: 27-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : Authentication bypass in FreeRealty Vendor:http://freerealty.rwcinc.net/ Author:Sid3^effects Description : Free Realty is primarily designed f...

CVE-2007-4111

SQL injection vulnerability in the login script in Real Estate listing website application template, when logging in as user or manager, allows remote attackers to execute arbitrary SQL commands via the Password parameter...

realestate-sql.txt

A R I A - S E C U R I T Y Real Estate listing website application template SQL Injection Vendor: http://www.codewidgets.com Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net http://outlaw.aria-security.info...

Real Estate Listing Website Application Template Login Dialog - SQL Injection

Real Estate Listing Website Application Template Login Dialog - SQL Injection source: https://www.securityfocus.com/bid/25115/info Real Estate Listing Website Application Template is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using ...

Real Estate listing website application template SQL Injection

A R I A - S E C U R I T Y Real Estate listing website application template SQL Injection Vendor: http://www.codewidgets.com Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net http://outlaw.aria-security.info...

CVE-2006-5955

Affected software: 20/20 DataShed (Real Estate Listing System). Vulnerable component: listings.asp (CVE-2006-5955) with vulnerability exposed via the itemID parameter, enabling SQL commands to be executed remotely. Related entry CVE-2006-6067 documents additional vectors (itemID to f-email.asp an...

realSQL.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/Real Estate Listing System.txt ----------------------------------------------------------- Software: Real Estate Listing System Method : Sql Injection PoC: http://target/path/listings.asp?itemID=SQL Contact:...